2af54b6d86573ccfa0858a0732c9ef66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af54b6d86573ccfa0858a0732c9ef66_JaffaCakes118
Size

168KB
MD5

2af54b6d86573ccfa0858a0732c9ef66
SHA1

ec5813024e0194af5faa830bfd0c572144041bc8
SHA256

9f9a2b36d81e2b74ce66ee80c89653422d8bd1f13fc1c1bba7effc9b4017602f
SHA512

d16d29b44743060a09642636a38308a9a73879971e4c2aba11b0a5be27f712aac260d8c44cbaaab887c422c8b2eb4c35fa0a288aad11827f45856d0d3b68176a
SSDEEP

1536:ML5PLer8j4ZJNQ/UNIrzmhX8S/diwtoxNFu4t6h6mKj9CYJQzloO9n5hoXwU:I9G6gJWsNIERdi2WqIhJQz3HU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af54b6d86573ccfa0858a0732c9ef66_JaffaCakes118

Files

2af54b6d86573ccfa0858a0732c9ef66_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cbf5b3bf528b1057d0ea24a460fd8a9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

V:\zeldewknds\lohbceue\iodsystem\wdfedf.PdB

Imports

kernel32

GetStdHandle
LocalAlloc
LocalFree

user32

ExitWindowsEx
GetDialogBaseUnits
wvsprintfW
CreateIcon
ChangeDisplaySettingsW
GrayStringA

msvcrt

__dllonexit
_adjust_fdiv
malloc
_initterm
free
_onexit
iswlower
div
strerror

Exports

Exports

dIzeynwyKrovIvcb
hu8re5rty
xyopadfe

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1017B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ