0e1f4a136d096fb3ec7f09a73944d360_JaffaCakes118 | Triage

Sharing

General

Target

0e1f4a136d096fb3ec7f09a73944d360_JaffaCakes118
Size

156KB
MD5

0e1f4a136d096fb3ec7f09a73944d360
SHA1

7b589dc9ee56231e4a34aa3926260704c07ce753
SHA256

1c35430db0926e2176e8e884293d786d232d562e0611899f6ec70e54936cfd16
SHA512

0a3fd7a84dafe913613b006f88e5e1a282aaaca3d2f6f60909f205e3563a9a196d15f6a9d6c7f4c08d87e30d59d0274872b48a1183eb9f53ac7a1e4f355499c6
SSDEEP

3072:CWrQ+rL8+jnTF8dnPSyZHoOWUOLNAD7v3G8h/CqIRqi:JBrL82udnBH1WU447fHhjc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e1f4a136d096fb3ec7f09a73944d360_JaffaCakes118

Files

0e1f4a136d096fb3ec7f09a73944d360_JaffaCakes118
.dll windows:4 windows x86 arch:x86

06678bc95932af4587202afef225038c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fgh4wsadgsd.pdb

Imports

kernel32

InterlockedCompareExchange
SetConsoleTitleA
CreateMutexW
SetHandleCount
GetProcessHeap
CreateFiberEx
VerLanguageNameA
GetNumberFormatA
SetConsoleCP
GetVolumePathNameA
GetPrivateProfileStringA
GlobalGetAtomNameA
GetBinaryTypeA
FindNextVolumeW
EnumResourceNamesW
CreateWaitableTimerA

Exports

Exports

F6reKl5ir
VHtGX
fOwpA
gQ0NZq7

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 488B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ