07d308923f7c46c70bdac5e2db92821f_JaffaCakes118 | Triage

Sharing

General

Target

07d308923f7c46c70bdac5e2db92821f_JaffaCakes118
Size

125KB
MD5

07d308923f7c46c70bdac5e2db92821f
SHA1

a3f88beb376cba7786da247a2f68fb859733cfa2
SHA256

083540092c3ecaede2fb4f45de2551be35a2ddc00529a07edff67519a8a36501
SHA512

1c1e5e9db4cd5b0241ffe13d612d35613431cdf8215701105ebef76828c2f4bf600870bea12a9203e8a16ae73509823d863880fe1b33c6c072c9141104a1e96c
SSDEEP

3072:mssH3Hz7gq5ugnXfIIeNIo9E2S+Nb/OMMzm8Ac:m9XoGugXAvz5bjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d308923f7c46c70bdac5e2db92821f_JaffaCakes118

Files

07d308923f7c46c70bdac5e2db92821f_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

7e1db0c595826da55b41459b3869cbfb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSAStartup

wininet

InternetConnectA

shlwapi

SHGetValueA

mfc42

ord3663

msvcrt

??1type_info@@UAE@XZ

user32

EndPaint

gdi32

CreateCompatibleBitmap

shell32

SHGetSpecialFolderLocation

comctl32

_TrackMouseEvent

ole32

CoInitialize

oleaut32

RegisterTypeLi

urlmon

URLDownloadToFileA

Exports

Exports

CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
SecurityMonitor
ShowSecurityDialog

Sections

.text
Size: 94KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE