73c279caba9b900e96bef4a362ebd806_JaffaCakes118 | Triage

Sharing

General

Target

73c279caba9b900e96bef4a362ebd806_JaffaCakes118
Size

124KB
MD5

73c279caba9b900e96bef4a362ebd806
SHA1

66c3d3189f0060190d20438b59bda80b5dc83975
SHA256

1208a5f8926aa6b97c6841dc7d345e048a1ded0b2f00d1b764fed24e91cf480b
SHA512

23bc486f01c8b5a2f1df89007625598f4b713e77c80880c9c134805c45d2ceb20fc28b054de935bee587fcf364a82be51683ddc367f10a192e5d8a47fb84bb77
SSDEEP

1536:uTFoDSlF2TvT+mKxn0Qlrv9gUttb2PuKIt4p4abOk02WtOoA5h9x2pep5u:4jlF8+JXrdb6uvtwJbOGaOoASN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73c279caba9b900e96bef4a362ebd806_JaffaCakes118

Files

73c279caba9b900e96bef4a362ebd806_JaffaCakes118
.dll windows:4 windows x86 arch:x86

78b9cb3babfe819cf8604c478bd34ca9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrlenA
lstrcpyA
VirtualFree
GetModuleHandleA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary

msvcrt

malloc
_adjust_fdiv
free
_except_handler3
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm

Exports

Exports

ActiveX_
ActiveX_1
ActiveX_2
ActiveX_3
GenHWID
LoadAllDll
PLCloseDevices
PLFindAndOpenDevices
PLSetCurrentDevice
PLSetUvcDevice
ReadExtUnit
ReadReg
ReleaseLogObjects
WriteExtUnit
WriteReg
_declspecs

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ