JaffaCakes118_daa0000ac0b4fe929328096f5ea7af01554cd1b1453c80027c4ede948174fe39 | Triage

Sharing

General

Target

JaffaCakes118_daa0000ac0b4fe929328096f5ea7af01554cd1b1453c80027c4ede948174fe39
Size

163KB
MD5

e9554376a1e3e86b5d50f8966043589b
SHA1

cf4c89fdd3bbdfb62f948c9a3f9e6add72a1b259
SHA256

daa0000ac0b4fe929328096f5ea7af01554cd1b1453c80027c4ede948174fe39
SHA512

47ac769246f1dfeb682267d4dce7ef2dfaf45d8b4a8b945ced35af55765cb5d23351f1d0239a0d236805b144fb12d5bc3d9fb693e8faadc76472fa262fbb8960
SSDEEP

3072:zar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:1s4p+ADxnSO6D2cOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_daa0000ac0b4fe929328096f5ea7af01554cd1b1453c80027c4ede948174fe39

Files

JaffaCakes118_daa0000ac0b4fe929328096f5ea7af01554cd1b1453c80027c4ede948174fe39
.dll windows:5 windows x86 arch:x86

a5d8d3bddce161fe65c4f476bd18c6da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

clusapi

ClusterEnum

user32

TranslateMessage

kernel32

LoadLibraryW
GetProfileSectionW
GetProfileSectionA
OpenSemaphoreW
CreateFileW
OutputDebugStringA
CloseHandle

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ