JaffaCakes118_af32e0c03835e1d21cb9c23dffb94198 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JaffaCakes118_af32e0c03835e1d21cb9c23dffb94198
Size

180KB
MD5

af32e0c03835e1d21cb9c23dffb94198
SHA1

ab7f8557a2d75c313f79ae3f0a4d090d74ba30d1
SHA256

deb17df5c51fdea65b3d342426ab48560633ead10438762c9baec0aebecf2ad4
SHA512

8d3eb4269b33514442d04b8aabe2ed173f9c6179bccf3bf8ab285ae10236b17d20564f7d5da15390da45d6a29518696f0d071eb9133d36af2048f764ea88d5e8
SSDEEP

3072:v+8Tp4RPerDATzSZBBQs7iRE2PJspXlgQo/D1FZdvF+mAuZ56iTK:W8dQ+cfABus72E2PGpG/PvBAbi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_af32e0c03835e1d21cb9c23dffb94198

Files

JaffaCakes118_af32e0c03835e1d21cb9c23dffb94198
.dll windows:5 windows x86 arch:x86

b927e2fd6505c671ddbf01624ff63d85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

SHGetDesktopFolder

user32

ShowOwnedPopups

msvcrt

memset

iphlpapi

GetIfTable

setupapi

SetupDiEnumDeviceInfo

advapi32

RegOverridePredefKey

oleaut32

VarR4FromI8

kernel32

GetModuleFileNameW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ