681677881e2dc58338b8b2a1571e2959_JaffaCakes118 | Triage

Sharing

General

Target

681677881e2dc58338b8b2a1571e2959_JaffaCakes118
Size

21KB
MD5

681677881e2dc58338b8b2a1571e2959
SHA1

315e0774fde26709388ff550e27ff6f5ad2cf6d7
SHA256

ed8b7af590f7486fc26d543e1bdb9cc9ccc5509da12acb6511096087478c62a8
SHA512

f67892ebc081b815b5e9bf7d8730ebe24418475d1c757e1a79e9b9f1f8b3e77cb694c64296a222e12e9d187b4d68617f0a1d9f5cb03eb3e8699aca5f996e1a18
SSDEEP

384:TPHF/+wmW0GQ4S8bljuVMGkDAxRGo5B/CtutnX7wR8:TEV4S8BjRGk0vG+IsQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
681677881e2dc58338b8b2a1571e2959_JaffaCakes118

Files

681677881e2dc58338b8b2a1571e2959_JaffaCakes118
.dll windows:4 windows x86 arch:x86

15d8a76645fbef70664804252ed07763

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

htons
WSCEnumProtocols
WSCGetProviderPath

kernel32

HeapAlloc
HeapFree
ExpandEnvironmentStringsA
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
HeapDestroy
HeapCreate
GetLastError
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
CreateMutexW
VirtualQuery
WaitForSingleObject
WriteFile
CreateFileW
DeleteCriticalSection
ReleaseMutex
CloseHandle
IsDebuggerPresent
GetVersionExA
ExpandEnvironmentStringsW
FreeLibrary
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

advapi32

RegQueryValueExA
RegSetValueExA
RegDeleteValueA

Exports

Exports

GetLspGuid
WSPStartup

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ