a2af2ccaa3ca2214c5ab000380ed6477_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2af2ccaa3ca2214c5ab000380ed6477_JaffaCakes118
Size

8KB
MD5

a2af2ccaa3ca2214c5ab000380ed6477
SHA1

0b4df68c3975409033bcd7d408734eb7ffa63b89
SHA256

2c88f41e80c2057c4f1cb03ff56a2d653544321521cf9806c2e1e6cde9f34ec1
SHA512

689e053f8966f9d88a6bcf8750a6cd72e92707ccaac168237f24998254b78ce7190354b0ba96b886c2d5b832efd78186da6303ed2b62be28d26d5aad4bde58f0
SSDEEP

192:epdZN2W8/zASb8SJPjrqX8c3WE3CJTWrIMwym:UHNk/028SjU8IWSCJTWrdwym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2af2ccaa3ca2214c5ab000380ed6477_JaffaCakes118

Files

a2af2ccaa3ca2214c5ab000380ed6477_JaffaCakes118
.dll windows:6 windows x86 arch:x86

07e31ec26fe7b4d435fece8a0a2f8790

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

acledit.pdb

Imports

msvcrt

_except_handler4_common
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
memset

user32

LoadStringW
MessageBoxW

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DisableThreadLibraryCalls

Exports

Exports

DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ