f09f62b75fafea5323ae6ab5c2d1f073_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f09f62b75fafea5323ae6ab5c2d1f073_JaffaCakes118
Size

114KB
MD5

f09f62b75fafea5323ae6ab5c2d1f073
SHA1

47b850915fcbad9a8118fcc85acb44c70cfdc296
SHA256

4e01b34e48dc275e3722a0d17f88fcdac35d509fff16ab343c435abe13ecfb5e
SHA512

775b7cc31dc0a1909ee350470a7d98a55b2617116e8d6166e8e06d24f0935a257678c624c2d8a3210699b411fff839c5a93d459ec04ffc530d36f0684f9df6c1
SSDEEP

1536:wWqaH9lxonU4LmCUDLLXQeldmHPIo6umy6mkO7lY8p9dJ93jySsS6/9OLeOLlET2:wnaH9TnbBldmvILVylN7rrhGY6ORE6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f09f62b75fafea5323ae6ab5c2d1f073_JaffaCakes118

Files

f09f62b75fafea5323ae6ab5c2d1f073_JaffaCakes118
.dll windows:5 windows x86 arch:x86

cc48d4488289709d25cb9bfc9eeaebf3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
SetEnvironmentVariableA
lstrlenA
GetLocaleInfoW
CompareStringW
CompareStringA
lstrlenW
GetStringTypeExW
GetStringTypeExA
lstrcmpiW
lstrcmpiA
FileTimeToLocalFileTime
GetLastError

gdi32

GetObjectA

msvcrt

memset
strcpy
strstr
strlen

Exports

Exports

AeryCGQiu

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ