32bfea2acdeeecb532cdadaaaaec46db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32bfea2acdeeecb532cdadaaaaec46db_JaffaCakes118
Size

99KB
MD5

32bfea2acdeeecb532cdadaaaaec46db
SHA1

40ffc60f6bb07207641f9446b2ff347ba389dd07
SHA256

69e47ae76d04eb00ee58df64c36b540b333d2f706518a986dd361f65980604e2
SHA512

649a81281e66f6055199301ca365b3b66586d2f229b2268cb81572783c8e8d3e01232e60cea7547a4f7e4c23b227ee2544a428286121168068efcec112213506
SSDEEP

3072:OvvV3LKK9kMq5UwFB6byVdp80OpXorEoHK7fnvM:qGK9kMgU5bEdp8hYrEoq7fE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32bfea2acdeeecb532cdadaaaaec46db_JaffaCakes118

Files

32bfea2acdeeecb532cdadaaaaec46db_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

cc57de27c39c384bfcfa14d98c1bbf0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

OpenSCManagerA

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE