JaffaCakes118_9c17d88097a81d40ec4350d3514673aaf8f239948c8d57c4a2b02d7339420288 | Triage

Sharing

General

Target

JaffaCakes118_9c17d88097a81d40ec4350d3514673aaf8f239948c8d57c4a2b02d7339420288
Size

204KB
MD5

ddf2b22597913e5a418ccea5284babcc
SHA1

78f43514ea12088a842421bab6fbab94070a5094
SHA256

9c17d88097a81d40ec4350d3514673aaf8f239948c8d57c4a2b02d7339420288
SHA512

7102088ac609c59123a124c2d017347c6d55fd47e48150ff2a62384bd57037cec2b389074245b6dde1c47cae2f8ccca8c62351b7deeea5f1353cf76ef018a01b
SSDEEP

3072:qBHfDmTQoHJhc+1aImpJRxSmR7bVsSazalcBfc7Ivu5IMlZ:qBHLSc+wLJRHFVsSaGluUs25Iw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9c17d88097a81d40ec4350d3514673aaf8f239948c8d57c4a2b02d7339420288

Files

JaffaCakes118_9c17d88097a81d40ec4350d3514673aaf8f239948c8d57c4a2b02d7339420288
.dll windows:5 windows x86 arch:x86

2715a19d1d4a50604e0ace50d5e16153

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

OffsetClipRgn

user32

GetMenuState
EnumDisplayDevicesW
TranslateMessage
DragDetect

wintrust

CryptCATAdminCalcHashFromFileHandle

advapi32

RegLoadAppKeyW
CloseEncryptedFileRaw

kernel32

GetSystemDefaultUILanguage
CloseHandle
OutputDebugStringA
LoadLibraryA
LoadLibraryW
GetPriorityClass

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ