a13cde651fc1161b63a944a28bb22050_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a13cde651fc1161b63a944a28bb22050_JaffaCakes118
Size

51KB
MD5

a13cde651fc1161b63a944a28bb22050
SHA1

3da65cf0a6876519cc5053c7ff0b668ac036472e
SHA256

84514559b66562abeffc5c240052f068e5c3a464fe0c514b77a82edca9c60bdf
SHA512

da7374040696f9efbd86830c3191fb89d63a309cfc9c0d06751dd2dcdd57d1f182ba92b881ee2e819e36b03b1e76087c317dcabb269746d08d12308a0cc72db6
SSDEEP

768:NBsKdkuEdfZ9S3re3jVIyUsK0xAgSzaLxU1JlT5Ylr/iHgt8VrP2Y:NBRiuIPS3rgjDUszjUsDmdN2Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a13cde651fc1161b63a944a28bb22050_JaffaCakes118

Files

a13cde651fc1161b63a944a28bb22050_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4eaa6a39019fdde8ba1831059dc3318b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

mastenr.pdb

Imports

kernel32

FreeLibrary
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
lstrcpyW
CloseHandle
MulDiv
SetEvent
MultiByteToWideChar
GetCurrentThreadId
GetProcAddress
GlobalAlloc
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
CreateEventW
GetTickCount
GetTempPathW
GetTempFileNameW
CopyFileW
ReadFile
GetFileAttributesW
CreateFileW
WriteFile
GlobalFree
DeleteFileW
ResetEvent
GetLocalTime
lstrcatW
GetUserDefaultLCID
GetCurrentDirectoryW
FormatMessageW
LocalFree
lstrcmpW
GetModuleHandleA
QueryPerformanceCounter
lstrlenW

advapi32

IsValidSid

msvcrt

exit

Exports

Exports

ingf

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ