233947a7525bbba012e0942a37ac0297_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

233947a7525bbba012e0942a37ac0297_JaffaCakes118
Size

98KB
MD5

233947a7525bbba012e0942a37ac0297
SHA1

ae6d8738aa4ba6d8fde035efdd9b3b9e4af785ee
SHA256

470a945ec356b3a25fe04aa6c2d4222eceb0d33c6fc691db02a5709241d00a99
SHA512

07ef8159cbba56b116c4f7c67905f4cd9403a0bbe527569ec751072d0aa40354f20f17ab6788be4e2ebe898ad9de60d4ec6327ef377cf3ce2195582a8df0a50c
SSDEEP

1536:jiZiNn9fRcXa7C4CAQ0Zf2kARWjr6wZYQi3At/AUMA46viTU6/sHQnsOQbT1:OZi/nrCAQ0Jjr/43bUw6vUU0hsT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
233947a7525bbba012e0942a37ac0297_JaffaCakes118

Files

233947a7525bbba012e0942a37ac0297_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

1bb7c2b5ec1ac0d41810376e518fc4cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

TlsSetValue
LoadLibraryExA
SetupComm
GetProcAddress
GetDateFormatW

advapi32

FreeSid

oleaut32

SysFreeString

user32

wvsprintfA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Mphnoml
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.none
Size: 96KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.none2
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 224B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE