3558220263e200dd9495bdee0621b3c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3558220263e200dd9495bdee0621b3c2_JaffaCakes118
Size

99KB
MD5

3558220263e200dd9495bdee0621b3c2
SHA1

c75182cbaea300ee79f2d3211fc0134395c59575
SHA256

ae89859057822b853de49fa651690ff2c04e94c2ccfedb021aa0e5930a8a79ca
SHA512

dac01000fb65b95be6c52d33d4a259150aa9262e0879e4cd3dc68bbee56fd3a4e17996caad1e1a4ade6faa75418bf303ff82bafb19b3906e879f5bccc998598d
SSDEEP

3072:l04dNo3HPw7NULouu3NRH+JZGJkEQQTbMj0R:fduY+LK3N9Q0ktybMj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3558220263e200dd9495bdee0621b3c2_JaffaCakes118

Files

3558220263e200dd9495bdee0621b3c2_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

c86679d6367622febbc0960259106a9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCalendarInfoA
GetProcAddress
LoadLibraryExA
QueueUserAPC
OpenThread

advapi32

FreeSid

oleaut32

SysFreeString

user32

wvsprintfA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Ajgmgbo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.none
Size: 95KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.none2
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 224B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mnon
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ