fba5af94667515a27ed74c5653c2d18f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba5af94667515a27ed74c5653c2d18f_JaffaCakes118
Size

68KB
MD5

fba5af94667515a27ed74c5653c2d18f
SHA1

452cbfe97a25aa79d9127361ed0c29461943b2d6
SHA256

c30895d40ca026b8fd5dab693d7a97927cdbbe0158e219a8cc1b28831c9dae36
SHA512

55b1c2025d48e051775bcab28c469b08a0d89e9356192b3aaa505ee36a97b167fad86890fd29fa35d7d1c11ac7d4f78e9887d0acbde1f82988b582d496a3956f
SSDEEP

768:XiVHszlUWX1nHnPRMlPFi/QNQoXwCoQ7NWBNmFu0CWRZNRi0sOqVEUs7o8B1zmn9:KMUaHPuzoj6H78f0uC/GcXEUP6eBOt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fba5af94667515a27ed74c5653c2d18f_JaffaCakes118

Files

fba5af94667515a27ed74c5653c2d18f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

994f61f0e7f3f826bca28c1cf77b2a82

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

synocbeack.pdb

Imports

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
Sleep
GetModuleHandleW
GetModuleHandleA
GetProcAddress
GetLastError
OpenProcess
CreateRemoteThread
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
UnhandledExceptionFilter

user32

CheckMenuItem

advapi32

AdjustTokenPrivileges
OpenProcessToken

Exports

Exports

amtuxgnc

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ