090fcbd511162acc6a89fd3472dc5c20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

090fcbd511162acc6a89fd3472dc5c20_JaffaCakes118
Size

152KB
MD5

090fcbd511162acc6a89fd3472dc5c20
SHA1

83858277b0f4e7bbcac4d63e3b19332ee7d7c2cd
SHA256

94ea546ebb3257c881f36800bc88133eedcaef2582a23ccc9f81bbb29eb4d7ea
SHA512

efbb736b8ff62304c90722bb8b1aebb8b1361831b695de6d81e2a05a62a494d2331a9b49eebeae0c076d634912645a5310caeef12377b913ad5e45e8e1c5cf3e
SSDEEP

3072:6QJwel5GoEyaFF+ieqxZQ0voBwf5JvPsGsd0I4ZxL:6QJ1LzOFTxlvoCfjvPd+0ICL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
090fcbd511162acc6a89fd3472dc5c20_JaffaCakes118

Files

090fcbd511162acc6a89fd3472dc5c20_JaffaCakes118
.dll windows:4 windows x86 arch:x86

06678bc95932af4587202afef225038c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fgh4wsadgsd.pdb

Imports

kernel32

InterlockedCompareExchange
SetConsoleTitleA
CreateMutexW
SetHandleCount
GetProcessHeap
CreateFiberEx
VerLanguageNameA
GetNumberFormatA
SetConsoleCP
GetVolumePathNameA
GetPrivateProfileStringA
GlobalGetAtomNameA
GetBinaryTypeA
FindNextVolumeW
EnumResourceNamesW
CreateWaitableTimerA

Exports

Exports

F6reKl5ir
VHtGX
fOwpA
gQ0NZq7

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 492B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ