JaffaCakes118_574ff1c505728c7022daec14446396f0de376464d90500a7fa7097864798900e | Triage

Sharing

General

Target

JaffaCakes118_574ff1c505728c7022daec14446396f0de376464d90500a7fa7097864798900e
Size

204KB
MD5

250c417c76cde0bb6858db1cfa0344ea
SHA1

f5cb3e17bfe1c11c254027fac401f8435b845cab
SHA256

574ff1c505728c7022daec14446396f0de376464d90500a7fa7097864798900e
SHA512

e4cf2015a94647228eb4c060748816e325c315981b69bb62b839e81a85ba4e2e50d708d1272edaf41592cccc11e21bd9453757c15cd43aa6e78f5e55b89ab811
SSDEEP

3072:t6FOf6h8i6pdDPvaaeEGObTS/HaoGoK9kN+Jcr9bhrFKL3fJpwZ:tZuX6pEaeEDheWa+Jc9bhorfTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_574ff1c505728c7022daec14446396f0de376464d90500a7fa7097864798900e

Files

JaffaCakes118_574ff1c505728c7022daec14446396f0de376464d90500a7fa7097864798900e
.dll windows:5 windows x86 arch:x86

cb5482a0fad978688db5ffd0e59e43ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wintrust

CryptCATAdminCalcHashFromFileHandle

kernel32

LoadLibraryA
CloseHandle
LoadLibraryW
OutputDebugStringA
GetSystemDefaultUILanguage
GetPriorityClass

gdi32

OffsetClipRgn

advapi32

RegLoadAppKeyW
CloseEncryptedFileRaw

user32

TranslateMessage
EnumDisplayDevicesW
DragDetect
GetMenuState

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ