eb3d1f6f09a0a1fe9f4ac046a9bf59bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb3d1f6f09a0a1fe9f4ac046a9bf59bd_JaffaCakes118
Size

7KB
MD5

eb3d1f6f09a0a1fe9f4ac046a9bf59bd
SHA1

84f635433ffc98c8514efd497f8ed827f0b592d1
SHA256

1e1214ce59de5e1eeaf12161b7ba47242911899fb9aa6f6c3a910d48d4e83fc9
SHA512

003402f68e5266fa20db86a2c76f1f71991f01aa09c089824823996869ad10418aaf45e2d362605fd94cf194476b71614296089ecd63ec3364baacfcc002f41d
SSDEEP

96:+9RXVtx6VRBXEg/oNFz9/fKY+HMPFZdfH4+OqaavZEWFf93CGCRWw+:KZZkRFB/oDtfXfH4rqaav6Wt93CzRWr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb3d1f6f09a0a1fe9f4ac046a9bf59bd_JaffaCakes118

Files

eb3d1f6f09a0a1fe9f4ac046a9bf59bd_JaffaCakes118
.dll windows:6 windows x86 arch:x86

71f3bb1d66c3d112a7ecf82331a76756

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

AECache.pdb

Imports

msvcrt

_except_handler4_common
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

Sleep
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetLastError
BaseFlushAppcompatCache
GetTickCount

wdscore

WdsSetupLogMessageA
CurrentIP
ConstructPartialMsgVA

Exports

Exports

Sysprep_Clean_AECache

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ