3cefc53600a70df8124d377a3d605b36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cefc53600a70df8124d377a3d605b36_JaffaCakes118
Size

451KB
MD5

3cefc53600a70df8124d377a3d605b36
SHA1

2199686346a0491a248cd783c8182240391b3586
SHA256

5047075e3357bb59aaf6c434255c26bf027ee48b1ff3bc5e4a8fbb3e128369e3
SHA512

05f24113df591b1277bb49f242a94d240c9de5acb51f9eb13db8b50381c5dad322566cb776208d5f3ebe4faf5abb39858fb82820a03260264a60855e34ee9979
SSDEEP

12288:QyB9RQinv119MG6cuRaJ8EpexSxEcHmlJclyeIxJkQTritwnpJ6:QKZ1oN+eVcGlIyXxXTrq0pY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cefc53600a70df8124d377a3d605b36_JaffaCakes118

Files

3cefc53600a70df8124d377a3d605b36_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ