d594aed8724f75bc5c989b2ab7c2f835_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d594aed8724f75bc5c989b2ab7c2f835_JaffaCakes118
Size

41KB
MD5

d594aed8724f75bc5c989b2ab7c2f835
SHA1

2c505d628c0def1035e529d84a2bd89af6967c76
SHA256

b7168fbdd47f7bffad93593f2f3bd15ea224f5da7a21990f4d9f979cdeae8d73
SHA512

52ae53fdfccb7f4f68d9a206131d6438dc7142c88fee2b764ce93790a71651e92fae64545d136307fbeeebbdc4c053c828c5ae3e469152a0381ec2ace6d1eedd
SSDEEP

768:4g//FcmSEa0GjEJJLgHShwJ8vi95R7SOFf1m4fwkSoEKrFMnp4nxOv+E9tVzPJ:4gnFcw1OsVaSeJH5dSoOtoMhv+WXzh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d594aed8724f75bc5c989b2ab7c2f835_JaffaCakes118

Files

d594aed8724f75bc5c989b2ab7c2f835_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.DJ29lU6
Size: 33KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1nlx5nE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PhPotxM
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE