2c88e229741b2503555001548f2b9256_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c88e229741b2503555001548f2b9256_JaffaCakes118
Size

83KB
MD5

2c88e229741b2503555001548f2b9256
SHA1

4e1008cdfd4255a32e2fb33e6a285ad82d342fe0
SHA256

89cf72abbe3218bdcfc78fae8370ffb83802eb4a94fc7b8ae957e458b949f627
SHA512

be32670d7fd87f6b0c44cdeda09aa7343a88d3711cd6c976a124a544ccfadd0cb335b01af0de64898e35b0c2cbcb55366a0dd466ec1d0b7ed214aa385e6ff73f
SSDEEP

1536:iTRKpt53/27CwmgShld9Id26W7Pmg7z7WrU481z83V9/br9MzMUN:xtVrwmgqlAAh7pjMU4E8n/brWzzN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c88e229741b2503555001548f2b9256_JaffaCakes118

Files

2c88e229741b2503555001548f2b9256_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

1bf80e037d24a8f2a57ceb7c286ebcca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCalendarInfoA
SetConsoleCP
GetProcAddress
VerifyVersionInfoW
LoadLibraryExA
SwitchToFiber
GetConsoleAliasA

advapi32

FreeSid

oleaut32

SysFreeString

user32

wvsprintfA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Ioddgnn
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 79KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 224B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ