a72a19e074acd52c985978be15b6cbc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a72a19e074acd52c985978be15b6cbc9_JaffaCakes118
Size

829KB
MD5

a72a19e074acd52c985978be15b6cbc9
SHA1

5b38b9dc11c7451d957083c628495b94b692c0a2
SHA256

45934a56b04673e2cf0b4aa1b6994d49cd5610f64201194896c74c8189c9ae07
SHA512

3bdd7f89a4e2ab70aaf9888164bdcd0d979bd9e67509a999f455a5ae88b7e72d3ea01c3c71aea66a317c590851360982fde6eb73b9fc15adb6dc2669ae8dd857
SSDEEP

12288:Jv44gswW1szFXTCnWlwwj3/Lx/G0dPvCp1+hOFxrDIEqix/9qh8vDx2Q5Uk6RpjK:JvQpXmWlwwjtO0KYwxHHDzfvDxFPN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a72a19e074acd52c985978be15b6cbc9_JaffaCakes118

Files

a72a19e074acd52c985978be15b6cbc9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

a8a0812c4f4545858e643c0bc4a7834c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapCreate
GlobalAlloc
GetTickCount
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess

shell32

SHGetDesktopFolder

iphlpapi

AddIPAddress

secur32

CompleteAuthToken

powrprof

GetPwrCapabilities

Exports

Exports

antiemu30

Sections

.text
Size: 819KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bdd
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ