21ef602172abca7dc1b0b53e8f36360f_JaffaCakes118 | Triage

Sharing

General

Target

21ef602172abca7dc1b0b53e8f36360f_JaffaCakes118
Size

256KB
MD5

21ef602172abca7dc1b0b53e8f36360f
SHA1

80d15ae2c3dff67f5613a467fbaa7bae3a2c8e5f
SHA256

1b451adbebf860966630df870e2c152dcc99b123c55c3c3848bb633284d4d9fb
SHA512

22c5687f800169dc79c6bbcea24c2de3c7220bae3ccf6ba6d2693521bdddd6a2763ac41cc509e3fcf010f5f379520ce83f288951fb61e4181af771721590f59a
SSDEEP

3072:EBB3ZWCmo46T+k10B0v4Y0dTROO5wBHw58WTJ9KhFhagYf2nD/g6O3asxIbv7e:2pWJna10B0w5qMwNw58WTJ1D2n7gQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21ef602172abca7dc1b0b53e8f36360f_JaffaCakes118

Files

21ef602172abca7dc1b0b53e8f36360f_JaffaCakes118
.dll regsvr32 windows:6 windows x86 arch:x86

7c7e3a975a602893a48f3232632e896f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

oledb32r.pdb

Imports

msvcrt

_except_handler4_common
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
DisableThreadLibraryCalls

Exports

Exports

DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ