JaffaCakes118_e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4 | Triage

Sharing

General

Target

JaffaCakes118_e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4
Size

160KB
MD5

0e4e6e2851dfbf3fb7458e01d9b1e49b
SHA1

46bd8b7b3101b971d41afdbca0b5e1ae8ba3b727
SHA256

e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4
SHA512

ccc6fa924b8b2dd6c2fdda065983dd1736b45494f0783adb3bf802cdc2a86082ed3e309b40ad91bbe375f37392ac78144cccc3de8541e93112d95b99678948dd
SSDEEP

3072:r/FbrEzD9N+RiMB00c9/74DXE+JgaV7IPx+e6O/pPtaL+m:ZbrE1kvcB74DXZ2Melrm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4

Files

JaffaCakes118_e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4
.dll windows:5 windows x86 arch:x86

35893a758d71a4b313745582f88cfeb6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

clusapi

ClusterEnum

opengl32

glTexSubImage1D

advapi32

RegOverridePredefKey

kernel32

LoadLibraryExA
LoadLibraryW
GetProfileSectionW
OpenSemaphoreW
GetProfileSectionA
CreateFileW
OutputDebugStringA
CloseHandle

ole32

CreateStreamOnHGlobal
CreatePointerMoniker

user32

TranslateMessage

rasapi32

RasGetConnectionStatistics

Sections

.text
Size: 137KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ