5aad4b1bc58f27d15d69e04088fbc1e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aad4b1bc58f27d15d69e04088fbc1e1_JaffaCakes118
Size

455KB
MD5

5aad4b1bc58f27d15d69e04088fbc1e1
SHA1

568a941bba50c48b28dd78e28c264e96692d8d4f
SHA256

9a3a1c9f4bb58220b149fd279d98709fcf342d418f08a624f839652d0753d3aa
SHA512

5ebf1df221f20ea9392be6d8ed732207e09c4d2c1a656100fc65a419dd2e1f77497636c235d5277e1e3fc6a9bc4e8fa8e21d663ea7327b80badbfea3d5457173
SSDEEP

12288:mQt0GlxHntcYNqTRHYbAzG1DwqmBKh6KiJ5QTru:bt0oNYJAAzODwqmMKETru

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aad4b1bc58f27d15d69e04088fbc1e1_JaffaCakes118

Files

5aad4b1bc58f27d15d69e04088fbc1e1_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ