2e9b1b2f4c404bde5e1c495c842da8df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e9b1b2f4c404bde5e1c495c842da8df_JaffaCakes118
Size

51KB
MD5

2e9b1b2f4c404bde5e1c495c842da8df
SHA1

ec4d6ff91f1f9baaa1e8d77b6e7ad9b5b79dfc44
SHA256

7beafa9174a675cc8a2b8a9811ff8e6d66a92c8894ccce117a3a9cc393706fe2
SHA512

820d2b7b89f205631bff5a02ea6a7eae919fbfd14325046818ea8b831fbfd68c61d94675cb82c5eb4e265b6c6fc70f510542cef969544e706fc0978777bb0311
SSDEEP

1536:38s36/4IOh/Cj0WLJH8yb3xmsEvGw/uQYYwW:38s3bNIj0WL6yr4/uQYS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e9b1b2f4c404bde5e1c495c842da8df_JaffaCakes118

Files

2e9b1b2f4c404bde5e1c495c842da8df_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b3c02cfdb449a78cf9b96649d18e8264

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

deicrapifhtier.pdb

Imports

kernel32

QueryPerformanceCounter
Sleep
CloseHandle
GetCurrentProcessId
UnhandledExceptionFilter
GetCurrentProcess
GetTickCount
OpenProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetModuleHandleA
CreateRemoteThread
TerminateProcess
GetSystemTimeAsFileTime
GetProcAddress

advapi32

AdjustTokenPrivileges
OpenProcessToken
IsValidSid

Exports

Exports

oefyy

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ