a34b1a88f1eb7a27ddd71408d9ca6373_JaffaCakes118 | Triage

Sharing

General

Target

a34b1a88f1eb7a27ddd71408d9ca6373_JaffaCakes118
Size

164KB
MD5

a34b1a88f1eb7a27ddd71408d9ca6373
SHA1

1d363d77ff4866acc2572cd36c4098fc4b60311b
SHA256

0ca4f84f42c000128a1451ffafb83a1bc482fcb79dc5ff4a4b1263d7a9313391
SHA512

7779f6155360470207acef2292e843043148b9dd3b4778cf06c24af41211d257bbafa49a918faa189d67ba666ad255f0d2e07c3294d70ca0a9d72c25843a5618
SSDEEP

3072:J1V+vpDx7DUQrMrXxomqF0uMfbaqPR7sOdBvFBnBXit/ba82MnJI:XMXDUQrOqFXMzaqNs8vATa82M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a34b1a88f1eb7a27ddd71408d9ca6373_JaffaCakes118

Files

a34b1a88f1eb7a27ddd71408d9ca6373_JaffaCakes118
.dll windows:5 windows x86 arch:x86

aaf3f8a7e0fdc202353c68c4c54c5a75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
LoadLibraryA
LoadLibraryExW
LoadLibraryExA
LCIDToLocaleName
GetModuleHandleA

rpcrt4

UuidToStringA

advapi32

RegSaveKeyExA

user32

IsCharUpperW
CloseWindow

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.datA
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 843B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ