76d9f714fec38cd27be53dfb46c577dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76d9f714fec38cd27be53dfb46c577dd_JaffaCakes118
Size

64KB
MD5

76d9f714fec38cd27be53dfb46c577dd
SHA1

9cd0adeb128f4ec4267d48e473ec93c19f49d8b2
SHA256

1ca1b736a7a1a7d6e5483576d31a50a364186a2edd4da3c4ac8b9023776c7773
SHA512

f5142ff486a47a3753787a8717b03d4b4b075aaacf390b8c1fe6d231c652281c234aeb003d8c3bc73c965155ae15b98d2482cdfaa9cdcd7f783d340f6dc0b533
SSDEEP

768:LTNK0UUbz3ExxYixA9ObObm5m75vQbmNlzxVKbt9zlcDPzX+rHBmwaqee:LXUUv3EUia9O62ioedClcDPOUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76d9f714fec38cd27be53dfb46c577dd_JaffaCakes118

Files

76d9f714fec38cd27be53dfb46c577dd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a8ab0e1731e7720a5f0a6ab71b1e9bdb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetSystemTimeAdjustment
GetFileInformationByHandle
UnregisterWaitEx
MultiByteToWideChar
DebugBreak
EnumSystemCodePagesA
LZSeek
OpenEventA
SearchPathA
LockFileEx
lstrcpyn
OpenJobObjectA
GetCurrentProcess
SystemTimeToFileTime
Module32Next
IsBadStringPtrA
VirtualAlloc
ExitProcess
SetFileTime
CreateFileMappingA
RaiseException
GlobalUnWire
WriteProcessMemory
EnumResourceLanguagesA
ReadConsoleA
_hread
TerminateJobObject
GetEnvironmentVariableA
WaitForSingleObject

shell32

SHGetSpecialFolderPathA

mpr

WNetGetConnectionA

winmm

timeGetTime
timeEndPeriod

Exports

Exports

Mgpuuajxvm
CloseHlmxygxcl
IsNuqpmui
Fcifjix
Anqgepx
WriteXgxixmsxsv
Oobbufvt
Ufsacgnpwp

Sections

.itext
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 52KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ