52245c0daf000749bbe718fffc572124_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52245c0daf000749bbe718fffc572124_JaffaCakes118
Size

68KB
MD5

52245c0daf000749bbe718fffc572124
SHA1

c783ae9aa48c6545a6f13bbdf418d8a6dd602d5b
SHA256

a6eee2e3ba0f1807006a76b7cd50c9a3ae7278fbb0bcd6877a70f1027e0f6e03
SHA512

33fd48202eaf5f74f832806b3db11e9c43fa884b42a0e973504ea5bf55be75f55bb22c8fb3ec046b98e5e6ddcf129a611eb46654d7b43ba7fe158a51f6c873de
SSDEEP

1536:Xg0rS6w7JHe4eDYQKNE6Xfe9ElFjWKqqf8jHFv9FlF9BFfYRKYqgnqY:w+Sz9H5eDYQ8LXfeEljkjHL/F9BRqKYh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52245c0daf000749bbe718fffc572124_JaffaCakes118

Files

52245c0daf000749bbe718fffc572124_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9afa1945f6fb32f173defcc9fe56fb28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

odd.pdb

Imports

kernel32

ExitProcess
Beep
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
WriteFileEx
CreateFileA

Exports

Exports

onpevibha

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ