ffbdaefea355cdbf719d9207f71c6f24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffbdaefea355cdbf719d9207f71c6f24_JaffaCakes118
Size

374KB
MD5

ffbdaefea355cdbf719d9207f71c6f24
SHA1

898eaeee086fc7a9096131f6fe6e93e903b260ff
SHA256

9647b48f28880394d78fe75370b5652371d890e7515cb9e83c5810b3ad85c012
SHA512

33758f9088c7853b349f1fd4d12ebce7818ca0e43e8611914d338bf8587d104daf75d83365302ddbace9865a1df1e608e74c10d720a2abf00f0ef0a55064aba3
SSDEEP

6144:8ejmq+5+5lJlNo/zXqsaWNOEXVlsvog33PkDUN13onwvgen8/ZL:8e6L+qzasadEllsv733P4UN14qw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffbdaefea355cdbf719d9207f71c6f24_JaffaCakes118

Files

ffbdaefea355cdbf719d9207f71c6f24_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0479c26ca6b4aaafa533fe4c4c8551c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

Beep
OpenProcess
GetCurrentProcessId
lstrcmpA
MulDiv
LocalFree
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
TerminateThread
WaitForSingleObject
CreateThread
CloseHandle
GetLocaleInfoA
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
HeapAlloc
GetProcessHeap
HeapFree
ReadConsoleInputA
HeapValidate

msvcrt

memset

Exports

Exports

gtqz

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 316KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ