f98f85e131b24dc4c2bd7834ce957f0b_JaffaCakes118 | Triage

Sharing

General

Target

f98f85e131b24dc4c2bd7834ce957f0b_JaffaCakes118
Size

300KB
MD5

f98f85e131b24dc4c2bd7834ce957f0b
SHA1

5fabec8c5b8738c6b90cae67e8b2f998ddab3bce
SHA256

9bdada8ef5988f9a01354554ba03949509d670f054dd8a8c100daa39d8928ca2
SHA512

41562dfddf269a6b7454715bbcd65f72675b72928d5e8032df3bf5e55a1bcca35b865599c60f8825c0472971e708cec765b701f7fb838bfd63d6fbbbca9b6294
SSDEEP

6144:tkQwK7LwduWwITIhlwug39NeeQf218co6r4tc:Sb3r7Ajg3neeQY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f98f85e131b24dc4c2bd7834ce957f0b_JaffaCakes118

Files

f98f85e131b24dc4c2bd7834ce957f0b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5ed6dc498cc00bfa94f102d6ae729bc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\marya\Funbox\Funbox Project\MFunbox\ReleaseL\Lang\FBMA_DEU.pdb

Imports

mfc71lu

ord1093
ord371
ord1168
ord762
ord1079

mslur71

_onexit
__dllonexit
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
__security_error_handler
memset
_except_handler3
free

kernel32

InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE