be112e8185d9fc904224f14f04756ee5_JaffaCakes118 | Triage

Sharing

General

Target

be112e8185d9fc904224f14f04756ee5_JaffaCakes118
Size

51KB
MD5

be112e8185d9fc904224f14f04756ee5
SHA1

4c104dae177ff47f6cb7e7dad8df98a96cfc7027
SHA256

b7fec02b8691134174cac3fd61844fb56c459b2c1b72975a4d500b003915a3ed
SHA512

cfd89f6edabba2bacde62cc73448c238a7256e23fd8f18531aba27c341619d85195c7b2c9a2421fdbcc55c87e5ddd1f138bfa1b695931223ae217255899dbc8e
SSDEEP

1536:EtrQAV/SNW0nuwNH1XJlIfgUEcKGUKjT0Dc:ET/ONHZsfgZYT0o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be112e8185d9fc904224f14f04756ee5_JaffaCakes118

Files

be112e8185d9fc904224f14f04756ee5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8a0b1d7618f0d54659a6940156ea5da0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GlobalAlloc
VirtualProtect
GlobalFree
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
WaitForSingleObject
InterlockedCompareExchange
InterlockedDecrement
HeapAlloc
GetProcessHeap
HeapFree
CreateEventA
CreateSemaphoreA
CloseHandle
LeaveCriticalSection
TlsFree
InterlockedExchangeAdd
DeleteCriticalSection
TlsSetValue
TlsGetValue
InterlockedExchange
ReleaseSemaphore

msvcr71

_except_handler3
_adjust_fdiv
free
malloc
_initterm
__CppXcptFilter
__dllonexit
_onexit

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ