ace0683f86389b2cf152dfb86ffc3d86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace0683f86389b2cf152dfb86ffc3d86_JaffaCakes118
Size

42KB
MD5

ace0683f86389b2cf152dfb86ffc3d86
SHA1

2653e59f5e5486fbbe7bc06d16c91e8ec8a14f6c
SHA256

61e1c664821169ae22aea9e55508f3eadbdf1ef6d0ad4af087fd2df157b6e3e0
SHA512

0022f35d6f4dcc67cb6f85988ff8f23644ecb62b36dee2b40c713d69440b93e38cedd33b30130a16101d4c5ee7a100d06ed9b2453d9c9b7a901a4612b4bb8b7d
SSDEEP

768:l04EkzOWrpSUIpiiA+yIhish/bhDEdNB6yxQ1o9U:gkSWrcpiByh9DEdN/Qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace0683f86389b2cf152dfb86ffc3d86_JaffaCakes118

Files

ace0683f86389b2cf152dfb86ffc3d86_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f8d836ffa00e7f663e3d48d689667ad6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ