2a0af725c8afaa2b409c8595634d1370_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a0af725c8afaa2b409c8595634d1370_JaffaCakes118
Size

156KB
MD5

2a0af725c8afaa2b409c8595634d1370
SHA1

2d1204f2f0df59d891e511e05e5a8e7bd83ab931
SHA256

3165e9c28f302d69ec3852c7598d32a8299fa9fa8835713b50be5e5c45f83f50
SHA512

fa7b282e73c0f2c4f4018bd9137f045e361ac18c2440a48602a1d594fb7a9d95d20a42066795dcaf13696671cf22c2c395dfb195a4911862c8ac482615092650
SSDEEP

3072:Bn2xzxKb3ASU5PbCqHVwCyccZaHJ7dVnNXSfDbRfMC38t8Gly:Z2D633uCqHxtcZa11SfDNUCMtNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a0af725c8afaa2b409c8595634d1370_JaffaCakes118

Files

2a0af725c8afaa2b409c8595634d1370_JaffaCakes118
.dll windows:4 windows x86 arch:x86

06678bc95932af4587202afef225038c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fgh4wsadgsd.pdb

Imports

kernel32

InterlockedCompareExchange
SetConsoleTitleA
CreateMutexW
SetHandleCount
GetProcessHeap
CreateFiberEx
VerLanguageNameA
GetNumberFormatA
SetConsoleCP
GetVolumePathNameA
GetPrivateProfileStringA
GlobalGetAtomNameA
GetBinaryTypeA
FindNextVolumeW
EnumResourceNamesW
CreateWaitableTimerA

Exports

Exports

F6reKl5ir
VHtGX
fOwpA
gQ0NZq7

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 488B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ