JaffaCakes118_bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258 | Triage

Sharing

General

Target

JaffaCakes118_bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258
Size

160KB
MD5

af967109cf55e70dd68147f4a917d3f0
SHA1

c0741a04a19d30b9222d95c7528cf4129ca0249c
SHA256

bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258
SHA512

45e9f9aa99bdf5256ec4f684ab2f9fb86d0b86f03f64fb03c2151a9d3608ae8d3aa614a0761422512ae5ec69fe52e1dd68fda6552a477a932fb3bb0b601a27a8
SSDEEP

3072:whOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:n8mnT7Fmsans1+0Hw7/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258

Files

JaffaCakes118_bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258
.dll windows:5 windows x86 arch:x86

358e7b546fc120707f212d62466c1efc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

clusapi

ClusterEnum

kernel32

GetProfileSectionW
LoadLibraryW
GetModuleHandleW
LoadLibraryExW
OutputDebugStringA
CloseHandle
GetProfileSectionA
OpenSemaphoreW

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

user32

TranslateMessage

opengl32

glTexSubImage1D

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ