390029121772a48c7a0897d36507c6b9_JaffaCakes118 | Triage

Sharing

General

Target

390029121772a48c7a0897d36507c6b9_JaffaCakes118
Size

116KB
MD5

390029121772a48c7a0897d36507c6b9
SHA1

e42384aef3a1a7c277c25e3378002d4743135532
SHA256

9416d1a63fb0838a5731cb00f28675b72ae12dc3e60e94a2d8c3e05edc8f8788
SHA512

973228afaef002fca86b037558af8aef752158f0606c29a5d9d1710aa5e9e501d41a64853597039e557eebbb9fec12215e05784c01bc05da7c16dd859ff5c76e
SSDEEP

3072:dOaKhJBck9q0j65u0xzx2Ec2kc8+QxyqWbsi3+LBeU4:IhJBcKdj70hIUkcExyqQsveU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390029121772a48c7a0897d36507c6b9_JaffaCakes118

Files

390029121772a48c7a0897d36507c6b9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

57299865ffaa37ba108b62046ed0b2eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA

Exports

Exports

WlxShutdownEvent
WlxStartupEvent

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ