JaffaCakes118_fff539df22ccdff0e844a9b3761efd7fc407816c365e9d0134f89197a4691fd5 | Triage

Sharing

General

Target

JaffaCakes118_fff539df22ccdff0e844a9b3761efd7fc407816c365e9d0134f89197a4691fd5
Size

163KB
MD5

5671ec77a128691c40670dec7409fe89
SHA1

9680cd1a704953a9414f2ea0b304ef20d8f1168a
SHA256

fff539df22ccdff0e844a9b3761efd7fc407816c365e9d0134f89197a4691fd5
SHA512

f47740a1bb540634d557795525c009d61415c4081c691fd6dfa76876a04d4c77b1dd8ca6ba4393312478da6a1a5a7294192e2e929d7258fa0d5140706efb0fc0
SSDEEP

3072:19F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:19F6rQXvFczvYpQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_fff539df22ccdff0e844a9b3761efd7fc407816c365e9d0134f89197a4691fd5

Files

JaffaCakes118_fff539df22ccdff0e844a9b3761efd7fc407816c365e9d0134f89197a4691fd5
.dll windows:5 windows x86 arch:x86

88962f6760ea005847fb88b87e8ce1fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileSectionW
CloseHandle
OpenSemaphoreW
LoadLibraryW
OutputDebugStringA
CreateFileW
GetProfileSectionA

user32

TranslateMessage

clusapi

ClusterEnum

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ