JaffaCakes118_a5b38e271468b2b59622e1a2339d100eeeb3cb0fbaede35a2c6a4a807145211c | Triage

Sharing

General

Target

JaffaCakes118_a5b38e271468b2b59622e1a2339d100eeeb3cb0fbaede35a2c6a4a807145211c
Size

160KB
MD5

64b2b5d985a26cd1607f3d469cd92474
SHA1

e8e4569f678f367368f98ce27072b26467203355
SHA256

a5b38e271468b2b59622e1a2339d100eeeb3cb0fbaede35a2c6a4a807145211c
SHA512

317eecfd99ef3cf0a452ce2961a414a2ee0a551e8774b58d829c41c6b551d23b06f5c56079d400ebeb81c74908db0754e678ce63b73fdd1a710b09f78c9dd0a1
SSDEEP

3072:aWX2IjzzpM+PncPeY8+O3AU3HRIHPh3UGfXy0BHNkIv/ScbQQ2y0iNM0+y+N0tc:a42IfzNPnoeY8j3AsHGPXpHNj6rByM3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a5b38e271468b2b59622e1a2339d100eeeb3cb0fbaede35a2c6a4a807145211c

Files

JaffaCakes118_a5b38e271468b2b59622e1a2339d100eeeb3cb0fbaede35a2c6a4a807145211c
.dll windows:5 windows x86 arch:x86

b84fd50f2389cfd5bd83e2cf062986d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fffp4.pdb

Imports

kernel32

CloseHandle
OpenSemaphoreW
LoadLibraryExA
GetModuleHandleW
OutputDebugStringA
GetProfileSectionW

opengl32

glTexSubImage1D

ole32

CreateStreamOnHGlobal

user32

TranslateMessage

advapi32

RegLoadAppKeyW

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ