32f26acb2d69be497ede612847a9123a_JaffaCakes118 | Triage

Sharing

General

Target

32f26acb2d69be497ede612847a9123a_JaffaCakes118
Size

65KB
MD5

32f26acb2d69be497ede612847a9123a
SHA1

e8f362d03fe1c1d627ca9bd1f83e668c7a8fe828
SHA256

e304bffda63863b9577d5df806f5684f93f576ee288de11a124bea899e50553e
SHA512

5f24d338b9ebdf9b9aec4ab4b601d696a930336aaa534f2e86b03f9eb9d26e9b9b71a1e520bc2b89c0f569ba62b1ba94d0f4b868eb2511b8568444878cd94ccf
SSDEEP

1536:shNF2POkeLzucpZlhdBAyKiu3PvTCTwL+oRD/4ywBoFpbJ8j8:yIO1pZlhduiuuTLq/KoRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32f26acb2d69be497ede612847a9123a_JaffaCakes118

Files

32f26acb2d69be497ede612847a9123a_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

bab8068e32f4147c3e4aa1af6fef3f40

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

RegCloseKey

gdi32

SetROP2

ole32

IsEqualGUID

oleaut32

LoadTypeLib

user32

GetDC

wininet

InternetOpenA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 63KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE