d344df26622a67a66d05ca6f7c2e86db_JaffaCakes118 | Triage

Sharing

General

Target

d344df26622a67a66d05ca6f7c2e86db_JaffaCakes118
Size

827KB
MD5

d344df26622a67a66d05ca6f7c2e86db
SHA1

953c903516392d36323f84fe9904c31f10dad083
SHA256

1d674bc0bc54724d8ea02fba52fa253055f2c6bde15f8606c634d7b0f6acf1f8
SHA512

498148af39e26322fde409e2a0c58a44fe2e4b452ac2137987053d232ebf7a9f22e51ac2e1185bcc394756f9c422d788c6458e25f33dc86bf2f182e7cf8379b4
SSDEEP

24576:Aya2OX72mGx/sYaw6BfQbEyZ92IaBQnqGmlN2gn1:DTOX72mGxEZB980Nzn1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d344df26622a67a66d05ca6f7c2e86db_JaffaCakes118

Files

d344df26622a67a66d05ca6f7c2e86db_JaffaCakes118
.dll windows:5 windows x86 arch:x86

a8a0812c4f4545858e643c0bc4a7834c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapCreate
GlobalAlloc
GetTickCount
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess

shell32

SHGetDesktopFolder

iphlpapi

AddIPAddress

secur32

CompleteAuthToken

powrprof

GetPwrCapabilities

Exports

Exports

antiemu30

Sections

.text
Size: 817KB - Virtual size: 817KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bdd
Size: - Virtual size: 78KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ