f5743c60607a6001fbe3cc1c71ab5822_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5743c60607a6001fbe3cc1c71ab5822_JaffaCakes118
Size

42KB
MD5

f5743c60607a6001fbe3cc1c71ab5822
SHA1

83187d9f3406b37cab0def26372fc2f70e367116
SHA256

829838e6ddf813be0d016bbb6c6d9d9603ae7831963c53f00e3377070dc0ebc8
SHA512

ea3e5938f6b9ba612fcbea9f8f2ebd35ba4247ed8e573c686d26e9f90555e815ebc29159236f69b2200f718095557d2e87ce0d1c30cb04686e6460d1d245dea4
SSDEEP

768:rYQjFkTUzqT/XbpH0kUUN2q8mhBevA9Ny/O1o9tD9aW:doNrNrhBevA9soo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5743c60607a6001fbe3cc1c71ab5822_JaffaCakes118

Files

f5743c60607a6001fbe3cc1c71ab5822_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e414a34082cbbc6fa5453fa6c8759a08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
CloseHandle
GetStdHandle
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ