18b8d24100fcdc46dc9e3512a6cf77cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b8d24100fcdc46dc9e3512a6cf77cc_JaffaCakes118
Size

6KB
MD5

18b8d24100fcdc46dc9e3512a6cf77cc
SHA1

fda5b2c23041fc13125a7852921918819a3cd1a9
SHA256

a7a8753b606c1145db5588d012475bbbeb217c88ac927ae2c4a86dd6ae06a39e
SHA512

d76e05e6322505363a1c46914fb302bf25dd13dc6b028551185df1e488ea9258b07fcfc800bec1c29f285fe98c0fd3cba1c1f3ec0e5dc36c75ed5de17a4baf5b
SSDEEP

96:s8D6z3xLoYga2WAtmUSk88LZ4QusYB3tdU9YuB:s8D6jxkYDAZX99zitdU9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b8d24100fcdc46dc9e3512a6cf77cc_JaffaCakes118

Files

18b8d24100fcdc46dc9e3512a6cf77cc_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

0c00868d97999b6059c1c042a848e7c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

strcat

shlwapi

SHGetValueA

user32

wvsprintfA

Exports

Exports

CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
SecurityMonitor
ShowSecurityDialog
_CFilter

Sections

.text
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE