031f318c8ab815cda0d447904a925cf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

031f318c8ab815cda0d447904a925cf7_JaffaCakes118
Size

324KB
MD5

031f318c8ab815cda0d447904a925cf7
SHA1

2bbca22cb0355f1ad4acedd9dd69ebaaeddf6b9e
SHA256

9492c6842475059a6af7f4b8c42e03944f08938243fa393713a5a6a930d79bcd
SHA512

519a54859e82861cf3f73b3a6ac400b57bd560a53867b8396aa8c286a5ee4e675c75c3f80ddc0cb4e0ef80300ada6b4e985bd4bb73bdc8d1c56a673240a83c4d
SSDEEP

6144:m7fWXIrEU401YJpdX9IPS/AE8ZqJ5kHXBB0X3v8HoFS:m7fMUF1YJjX9fZ8ZmgE3Gx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
031f318c8ab815cda0d447904a925cf7_JaffaCakes118

Files

031f318c8ab815cda0d447904a925cf7_JaffaCakes118
.dll windows:5 windows x86 arch:x86

dc2ed48ba38dc3cd99f10d806fe1d696

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
LoadLibraryW
GetModuleHandleA

rasapi32

RasEnumAutodialAddressesW

oleaut32

GetRecordInfoFromGuids

user32

GetFocus

advapi32

RegCloseKey

Sections

.rdata0
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Rdata
Size: 4KB - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt2
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ