JaffaCakes118_6884e2a329660f4514addce94ac5828bdaa61aa38a2c01def1cd25c034541583 | Triage

Sharing

General

Target

JaffaCakes118_6884e2a329660f4514addce94ac5828bdaa61aa38a2c01def1cd25c034541583
Size

163KB
MD5

4aa64a753e24a26a4b972f23c669395a
SHA1

33c964859341e7fc4af801f5dbf9c4b8c3c8437b
SHA256

6884e2a329660f4514addce94ac5828bdaa61aa38a2c01def1cd25c034541583
SHA512

08d663343b2a943ebcf29a31d9525ec8b7e1520477578ae16a3276ac9ebeeab4bb4d80876906c990041a070219fd2ea34cffd09bf625f501810a60f901bdd962
SSDEEP

3072:B9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:B9F6rQXvFczvYpQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6884e2a329660f4514addce94ac5828bdaa61aa38a2c01def1cd25c034541583

Files

JaffaCakes118_6884e2a329660f4514addce94ac5828bdaa61aa38a2c01def1cd25c034541583
.dll windows:5 windows x86 arch:x86

88962f6760ea005847fb88b87e8ce1fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileSectionW
CloseHandle
OpenSemaphoreW
LoadLibraryW
OutputDebugStringA
CreateFileW
GetProfileSectionA

user32

TranslateMessage

clusapi

ClusterEnum

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ