JaffaCakes118_2d0ce259513d3db0f3af08428a097e4e9399b6ef1d8e5f87df946c6556532ffb | Triage

Sharing

General

Target

JaffaCakes118_2d0ce259513d3db0f3af08428a097e4e9399b6ef1d8e5f87df946c6556532ffb
Size

163KB
MD5

3e918f0af1b1de23278926f59cb9a593
SHA1

ab9ed2fc0e4aeaac2a5a9c1c79422c86055959c8
SHA256

2d0ce259513d3db0f3af08428a097e4e9399b6ef1d8e5f87df946c6556532ffb
SHA512

2e216bc0ad06493ab73496fa2f6b6f8a1261ee2dbe248b1fe2cecfcdea50a18b34a340b1e8b13fcfc23b12337205cd7c200165aa844c60b549c27d0d718c2c10
SSDEEP

3072:Car6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:0s4p+ADxnSO6D2cOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_2d0ce259513d3db0f3af08428a097e4e9399b6ef1d8e5f87df946c6556532ffb

Files

JaffaCakes118_2d0ce259513d3db0f3af08428a097e4e9399b6ef1d8e5f87df946c6556532ffb
.dll windows:5 windows x86 arch:x86

a5d8d3bddce161fe65c4f476bd18c6da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

clusapi

ClusterEnum

user32

TranslateMessage

kernel32

LoadLibraryW
GetProfileSectionW
GetProfileSectionA
OpenSemaphoreW
CreateFileW
OutputDebugStringA
CloseHandle

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ