JaffaCakes118_036c4ff29bc01296f501bf79ee08d04cbeb70703971b8fe64b769b2de003aa80 | Triage

Sharing

General

Target

JaffaCakes118_036c4ff29bc01296f501bf79ee08d04cbeb70703971b8fe64b769b2de003aa80
Size

204KB
MD5

b9c2de71bcb556f229401aa58021cb1b
SHA1

5e14d961f9780b8cb5e6d6ec41cb7745e3d3caab
SHA256

036c4ff29bc01296f501bf79ee08d04cbeb70703971b8fe64b769b2de003aa80
SHA512

6cf17d578c9592ef25877fdc027c8ffca4151c75b9db5a8bd1995586b1e8fd35a0a2ab73af36622f83ad33d8247d484c0cbdd0f4e0f8d1fe4a124b75eda378ef
SSDEEP

3072:s6FOf6h8i6pdDPvaaeEGObTS/HaoGoK9kN+Jcr9bhrFKL3fJpwZ:sZuX6pEaeEDheWa+Jc9bhorfTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_036c4ff29bc01296f501bf79ee08d04cbeb70703971b8fe64b769b2de003aa80

Files

JaffaCakes118_036c4ff29bc01296f501bf79ee08d04cbeb70703971b8fe64b769b2de003aa80
.dll windows:5 windows x86 arch:x86

cb5482a0fad978688db5ffd0e59e43ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wintrust

CryptCATAdminCalcHashFromFileHandle

kernel32

LoadLibraryA
CloseHandle
LoadLibraryW
OutputDebugStringA
GetSystemDefaultUILanguage
GetPriorityClass

gdi32

OffsetClipRgn

advapi32

RegLoadAppKeyW
CloseEncryptedFileRaw

user32

TranslateMessage
EnumDisplayDevicesW
DragDetect
GetMenuState

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ