868939fa52f00de8307aaf180e7ab33b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

868939fa52f00de8307aaf180e7ab33b_JaffaCakes118
Size

69KB
MD5

868939fa52f00de8307aaf180e7ab33b
SHA1

57d54d712de8e629d6d660323406fc677ecdd6d1
SHA256

8b104d21ed5b3985739afa511e7e5802dbc8e343c27548e2e4a57ae352ea1ff4
SHA512

65e4c29c07a112b7c0c19ba8e01411eb9cdf85847dbad6f9a34dd001cdf232a51807014ffcb09f42b158e0fdce69c008ac0ca216af99bc80de4678e9bcceb628
SSDEEP

1536:QSwfq+8D6aVzY1CQmprWQhtNDpYJ0mz/cw+Fu:v+o6oYYQmprfh3dlp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
868939fa52f00de8307aaf180e7ab33b_JaffaCakes118

Files

868939fa52f00de8307aaf180e7ab33b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

994f61f0e7f3f826bca28c1cf77b2a82

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

maicraium.pdb

Imports

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
Sleep
GetModuleHandleW
GetModuleHandleA
GetProcAddress
GetLastError
OpenProcess
CreateRemoteThread
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
UnhandledExceptionFilter

user32

CheckMenuItem

advapi32

AdjustTokenPrivileges
OpenProcessToken

Exports

Exports

avlpqa

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ