JaffaCakes118_728d30cfb9f268c82ed6117432d873cacf89c8e5f697d36d1338cb770c10dd41 | Triage

Sharing

General

Target

JaffaCakes118_728d30cfb9f268c82ed6117432d873cacf89c8e5f697d36d1338cb770c10dd41
Size

163KB
MD5

e55730cce96581d39f107fd0ba939314
SHA1

daff90535f72617b4f3e34caedbd5fa85750411c
SHA256

728d30cfb9f268c82ed6117432d873cacf89c8e5f697d36d1338cb770c10dd41
SHA512

f372bb83018db2ea3c9652fff8361ea45cf61c8a0e941ec32b64c4d9485105aedb9c3d7469e22d2dc42a28a7ca22126ecd6355969108f8f7e249d895bf97bb77
SSDEEP

3072:K9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:K9F6rQXvFczvYpQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_728d30cfb9f268c82ed6117432d873cacf89c8e5f697d36d1338cb770c10dd41

Files

JaffaCakes118_728d30cfb9f268c82ed6117432d873cacf89c8e5f697d36d1338cb770c10dd41
.dll windows:5 windows x86 arch:x86

88962f6760ea005847fb88b87e8ce1fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileSectionW
CloseHandle
OpenSemaphoreW
LoadLibraryW
OutputDebugStringA
CreateFileW
GetProfileSectionA

user32

TranslateMessage

clusapi

ClusterEnum

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ