JaffaCakes118_24f1f9ed8204191a96505c4ed60e1fd1bb5f96479d6b1e6958b0cdeaa986d795 | Triage

Sharing

General

Target

JaffaCakes118_24f1f9ed8204191a96505c4ed60e1fd1bb5f96479d6b1e6958b0cdeaa986d795
Size

163KB
MD5

c9fee3ae61d2e9231f4fcf32cb1a65aa
SHA1

8dcc3e68a85b515db0fbd18494b87ede34b96bb0
SHA256

24f1f9ed8204191a96505c4ed60e1fd1bb5f96479d6b1e6958b0cdeaa986d795
SHA512

f5fb1823d731c0d02c0f3b3f505392486f523ff589233c3afe664e7ab7d8dbfc54fdfdd5eecfde032d4f2c4e8262a3d701efb20a3146f9a3a854a7046a56c8ec
SSDEEP

3072:J9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:J9F6rQXvFczvYpQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_24f1f9ed8204191a96505c4ed60e1fd1bb5f96479d6b1e6958b0cdeaa986d795

Files

JaffaCakes118_24f1f9ed8204191a96505c4ed60e1fd1bb5f96479d6b1e6958b0cdeaa986d795
.dll windows:5 windows x86 arch:x86

88962f6760ea005847fb88b87e8ce1fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileSectionW
CloseHandle
OpenSemaphoreW
LoadLibraryW
OutputDebugStringA
CreateFileW
GetProfileSectionA

user32

TranslateMessage

clusapi

ClusterEnum

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ