2d4e26aa5edf552b6126fa6cec8434de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d4e26aa5edf552b6126fa6cec8434de_JaffaCakes118
Size

60KB
MD5

2d4e26aa5edf552b6126fa6cec8434de
SHA1

d920f15451743091e9bf30313c605ec6ae8e972b
SHA256

bedbda98d88cadea790210b728501328044f3fe7c69524ed55ea5207a1accbda
SHA512

45f677ee14a8e8d63bc5dc992b7e385c60322392ef18b99e821c987d6a5425c5b7717c7ba4bd64eb632c87e47e0ca3228a5c89b45d1ab679223d16e121a1ad08
SSDEEP

768:99htYuxxMz4m/0+m45dC66lsgrgipeaddlrTpEMaqZFI6rF2zRb1sueIxz9IsSnH:dVSzqiAls+gi0wvphy8F2zRb1suL9cH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d4e26aa5edf552b6126fa6cec8434de_JaffaCakes118

Files

2d4e26aa5edf552b6126fa6cec8434de_JaffaCakes118
.dll windows:4 windows x86 arch:x86

65bb2bf013e2a1448c9d69194be70193

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hal

KeQueryPerformanceCounter

ntoskrnl.exe

KeGetCurrentThread
KeInitializeTimer
MmQuerySystemSize
memcpy
memset
PsGetCurrentProcessId
IoGetCurrentProcess
KeTickCount
KeInitializeMutex
PsGetCurrentThreadId
KeQueryActiveProcessors
KeInitializeSpinLock
PsGetVersion

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 633B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ