JaffaCakes118_a5630fc0bbab897cecf55b16cd688baa52706c03dd96de999fc7b1ec330841e0 | Triage

Sharing

General

Target

JaffaCakes118_a5630fc0bbab897cecf55b16cd688baa52706c03dd96de999fc7b1ec330841e0
Size

163KB
MD5

722de0fd5911e81e4d8797454afb7c71
SHA1

cec5aa7b970e0f8ca5a4383f99bdc18b0ed8d3a3
SHA256

a5630fc0bbab897cecf55b16cd688baa52706c03dd96de999fc7b1ec330841e0
SHA512

ecaabc49a5175bbbcf017a5ceca4f8f1060995267ee5b808deb855f9385ae1f965dd79acbd07654958ae115ff781309c4a6edf7668127c9291f8c8ef853802cd
SSDEEP

3072:k9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:k9F6rQXvFczvYpQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a5630fc0bbab897cecf55b16cd688baa52706c03dd96de999fc7b1ec330841e0

Files

JaffaCakes118_a5630fc0bbab897cecf55b16cd688baa52706c03dd96de999fc7b1ec330841e0
.dll windows:5 windows x86 arch:x86

88962f6760ea005847fb88b87e8ce1fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileSectionW
CloseHandle
OpenSemaphoreW
LoadLibraryW
OutputDebugStringA
CreateFileW
GetProfileSectionA

user32

TranslateMessage

clusapi

ClusterEnum

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ