1a82eb213978c3175a7def218a492581_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a82eb213978c3175a7def218a492581_JaffaCakes118
Size

8KB
MD5

1a82eb213978c3175a7def218a492581
SHA1

1002dd61bb1b474671e6e9f9afaa4794e6861f9e
SHA256

f81a5a44e2ab731aa980d7cfc7c3ce2d635191dbb5e39cf56af1491d9e05787f
SHA512

3daf19ba46c139d9aa11053245a0f742c590de89ee403ce8271e84ef06e909b25e868e4746a0a37e6b8d6d6f2221c13b279be3b2dce274fe559fcffe6689e3e4
SSDEEP

192:epdZN2W8/zASb8SJPjrqX8c3WE3CJTWrIMwyzp/Kn:UHNk/028SjU8IWSCJTWrdwyzAn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a82eb213978c3175a7def218a492581_JaffaCakes118

Files

1a82eb213978c3175a7def218a492581_JaffaCakes118
.dll windows:6 windows x86 arch:x86

07e31ec26fe7b4d435fece8a0a2f8790

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

acledit.pdb

Imports

msvcrt

_except_handler4_common
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
memset

user32

LoadStringW
MessageBoxW

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DisableThreadLibraryCalls

Exports

Exports

DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ