053f5adb0e7a841047777000faa86ab7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

053f5adb0e7a841047777000faa86ab7_JaffaCakes118
Size

578KB
MD5

053f5adb0e7a841047777000faa86ab7
SHA1

c1893f12fd2452b2ea34fe7dd667ee76746e38b6
SHA256

2494cdd2eafba1dd3f9b962bb1e78dbce3cef8987ad8df2838dddfe1e58a4c55
SHA512

d17d157aaab7c1f436dcb0042a24708d155b58b1ce6bfd19a8d0478a180a034db770686f5682ec2adc461e8712a3383cb1c9f4c34829dad95253382c9b71b00f
SSDEEP

6144:KmDhykQAmED0WH2ohIS1j6C1y+rd//wg9wvWO+lW1rIuqWamJ9xTT3cx1J2Vgp:3mKNwCnrd//hw7tzJH3cx1UVgp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
053f5adb0e7a841047777000faa86ab7_JaffaCakes118

Files

053f5adb0e7a841047777000faa86ab7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1e0a83a483c59c9460db84a700b31e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

Beep
OpenProcess
GetCurrentProcessId
lstrcmpA
MulDiv
LocalFree
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
TerminateThread
WaitForSingleObject
CreateThread
CloseHandle
GetLocaleInfoA
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
GetCommProperties

Exports

Exports

uvxv

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ