af236ed35c4babf14992f888452976e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af236ed35c4babf14992f888452976e7_JaffaCakes118
Size

506KB
MD5

af236ed35c4babf14992f888452976e7
SHA1

95aea1f205e55a0bb985764c67d35e0f2fd87531
SHA256

5871a1057eeaa67b224bb9b854db46ebc6a6362a5f7ac4ceddeacf5d4e9efc9c
SHA512

190161c32ba8ec51b01dcf024081b7fcc4b9029fe1fecc58495a541eb7b30aa9d2c8a9601a209f100648393249f4017b6072d44caf9f76d61b7f37b6d7dd45ab
SSDEEP

12288:IC4rS/uA+A90EjdzG8MSD26qhq4Q2C+1BK9bDQCcT:IC8AzS/F60q72E8CcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af236ed35c4babf14992f888452976e7_JaffaCakes118

Files

af236ed35c4babf14992f888452976e7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0479c26ca6b4aaafa533fe4c4c8551c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

Beep
OpenProcess
GetCurrentProcessId
lstrcmpA
MulDiv
LocalFree
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
TerminateThread
WaitForSingleObject
CreateThread
CloseHandle
GetLocaleInfoA
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
HeapAlloc
GetProcessHeap
HeapFree
ReadConsoleInputA
HeapValidate

msvcrt

memset

Exports

Exports

olhuzo

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 448KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ