a6db5254bcf93b1d1a3d079ad07cad36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6db5254bcf93b1d1a3d079ad07cad36_JaffaCakes118
Size

160KB
MD5

a6db5254bcf93b1d1a3d079ad07cad36
SHA1

fdf5cbcb2018cd21e689f30480f018aa3daedffa
SHA256

43a03041bc9976180c9935b776c059bded6a22a61b24d7a5cddf62bdcfda81fd
SHA512

0b90fa18716afb1dfccce0062abf646b625838be9936a7e3c55be9fbf9f95563dfa701806366f29098f1f8978d83c6832178c11f31945f20930018b914ec1d49
SSDEEP

3072:N9CiKucYDmgGlZfAwzSsJ/2OjmJI0oPDW1Su1IhjwqYypNjgI7Yvgh:N9CiKucYDmJlpAmtyO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6db5254bcf93b1d1a3d079ad07cad36_JaffaCakes118

Files

a6db5254bcf93b1d1a3d079ad07cad36_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4cf5a46a4f296cecabe2e6017525b113

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Funbox\Oragnize\Share_PE\LANG\G2\FBPW_HUN\ReleaseL\FBPW_HUN.pdb

Imports

mfc71lu

ord1093
ord371
ord1168
ord762
ord1079

mslur71

_onexit
__dllonexit
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
__security_error_handler
memset
_except_handler3
free

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ