JaffaCakes118_4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de | Triage

Sharing

General

Target

JaffaCakes118_4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de
Size

163KB
MD5

c9118de34eaccd10f23a960e9f33e94a
SHA1

915dc517ec7bee08d0f39d56cee869997eab169e
SHA256

4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de
SHA512

52bc593179b20632068c137cdfa7938c5096d593391b11b48ca41fcd565913850020305d74ef66f844de59a7ddd0ccfed011b650c3a801918e09c8dcb8f6a4f4
SSDEEP

3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de

Files

JaffaCakes118_4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de
.dll windows:5 windows x86 arch:x86

a5d8d3bddce161fe65c4f476bd18c6da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

clusapi

ClusterEnum

user32

TranslateMessage

kernel32

LoadLibraryW
GetProfileSectionW
GetProfileSectionA
OpenSemaphoreW
CreateFileW
OutputDebugStringA
CloseHandle

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ