5a0b385364978492503975fd5ba14585_JaffaCakes118

General

Target

5a0b385364978492503975fd5ba14585_JaffaCakes118
Size

82KB
MD5

5a0b385364978492503975fd5ba14585
SHA1

47d2bca0fbda8cd54039e4257956204a386f657f
SHA256

1b75109a0a825cfb7903ebb8293d1f7fcc6bec18f073e854eed6435b98422bb9
SHA512

9852ee0317aed1e4d44f445b10f75847e9912ccad53d7354e18e15a5a7e8961536097295405dcd64744302f95d5b7a9f073dd08fbe50f78f572a1f95976423ea
SSDEEP

1536:lAjTBH96jk9X4+6Vfwe2CsFYeIvqyU2uaw40RWUnlL73N95:QBUjk9XD6Vfr2vqPxTwWUn1R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a0b385364978492503975fd5ba14585_JaffaCakes118

Files

5a0b385364978492503975fd5ba14585_JaffaCakes118
.dll regsvr32 windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AddUrlToFavorites
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllInstall
DllRegisterServer
DllUnregisterServer
DoAddToFavDlg
DoAddToFavDlgW
DoFileDownload
DoOrganizeFavDlg
DoOrganizeFavDlgW
DoPrivacyDlg
ExportCookieFileByProcessW
HlinkFindFrame
HlinkFrameNavigate
HlinkFrameNavigateNHL
IEAssociateThreadWithTab
IECancelSaveFile
IECreateDirectory
IECreateFile
IEDeleteFile
IEDisassociateThreadWithTab
IEFindFirstFile
IEGetFileAttributesEx
IEGetProtectedModeCookie
IEGetWriteableFolderPath
IEGetWriteableHKCU
IEInPrivateFilteringEnabled
IEIsInPrivateBrowsing
IEIsProtectedModeProcess
IEIsProtectedModeURL
IELaunchManageAddOnsUI
IELaunchURL
IEMoveFileEx
IERefreshElevationPolicy
IERegCreateKeyEx
IERegSetValueEx
IERegisterWritableRegistryKey
IERegisterWritableRegistryValue
IERemoveDirectory
IESaveFile
IESetProtectedModeCookie
IEShowSaveFileDialog
IEUnregisterWritableRegistry
ImportCookieFileByProcessW
ImportPrivacySettings
OpenURL
SHAddSubscribeFavorite
SetQueryNetSessionCount
SoftwareUpdateMessageBox
URLQualifyA
URLQualifyW
WinList_GetShellWindows

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.data Size: 25KB - Virtual size: 31KB

.rsrc Size: 7.0MB - Virtual size: 7.0MB

.reloc Size: 161KB - Virtual size: 160KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 25KB - Virtual size: 31KB

.rsrc
Size: 7.0MB - Virtual size: 7.0MB

.reloc
Size: 161KB - Virtual size: 160KB