57580bc7d3ee0f3c5f9d21fefb29d680_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57580bc7d3ee0f3c5f9d21fefb29d680_JaffaCakes118
Size

160KB
MD5

57580bc7d3ee0f3c5f9d21fefb29d680
SHA1

debbbc057eb0dbd66511029480aae8eca14a893c
SHA256

262cf660343191d7ae5a54de711382d8d30db07d32562dd09d2cc1f4fb5bfa3c
SHA512

aab016f499b3504cb80f9eab9d6fb25945bb292b6ff257a47ce510ce1489115c153b37e72d31dd422f55139fd23febc427437bb2af2c0ea75d76f3fc3ad35c23
SSDEEP

1536:qOEmZ+iCSKfT/7C6WXk4jMsTIN+XDXFoJLyM9dQMr+7Rdw9ad/je:VzZ+i/K7/7r4jMsTo+uLyM/Qn/Kad/S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57580bc7d3ee0f3c5f9d21fefb29d680_JaffaCakes118

Files

57580bc7d3ee0f3c5f9d21fefb29d680_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9262cc51f7dc9cbff80d5967f7c076d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetNamedPipeHandleStateW
DeleteTimerQueue
HeapUnlock
EnterCriticalSection
CompareFileTime
GetNamedPipeHandleStateW
DnsHostnameToComputerNameW
lstrcpyA
TlsAlloc
FreeConsole
TlsFree

user32

EnableScrollBar
ReleaseDC

Exports

Exports

MountainSnapshot

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ