JaffaCakes118_327585d9e9a12604381ee41ff0aa6d9a2f77efb1ee93fa8a64bf926684cdce57 | Triage

Sharing

General

Target

JaffaCakes118_327585d9e9a12604381ee41ff0aa6d9a2f77efb1ee93fa8a64bf926684cdce57
Size

163KB
MD5

2a4ce80398a50a6698f0529e42014b4b
SHA1

68dbb52a96d9d1dd8480569d7854a574bc3ef91c
SHA256

327585d9e9a12604381ee41ff0aa6d9a2f77efb1ee93fa8a64bf926684cdce57
SHA512

118d465d8eb36d2c850064ec3408e4d1aa8fbdcaac49d0c274faa94efd23438a6980ce8761649de5ad00e27ba554f0fdcada5b1b93d4375d23a535c994533f39
SSDEEP

3072:09F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:09F6rQXvFczvYpQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_327585d9e9a12604381ee41ff0aa6d9a2f77efb1ee93fa8a64bf926684cdce57

Files

JaffaCakes118_327585d9e9a12604381ee41ff0aa6d9a2f77efb1ee93fa8a64bf926684cdce57
.dll windows:5 windows x86 arch:x86

88962f6760ea005847fb88b87e8ce1fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileSectionW
CloseHandle
OpenSemaphoreW
LoadLibraryW
OutputDebugStringA
CreateFileW
GetProfileSectionA

user32

TranslateMessage

clusapi

ClusterEnum

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ