61d8b551c2b3196e69159d066204998b_JaffaCakes118 | Triage

Sharing

General

Target

61d8b551c2b3196e69159d066204998b_JaffaCakes118
Size

105KB
MD5

61d8b551c2b3196e69159d066204998b
SHA1

8c1b4ac99e91db99bf2fccf8ecebcd5b075a3925
SHA256

b5f1dcc1500bdff057196b13289fa5f69bcf178ed35baebd8ca42d58661ab296
SHA512

132641013b9268ab8e5c058b56603acb39bc630aeba4767b7967fd1316485fabc8bf8926b9ac06013a60d7e1f471b5fee1769abf2c611e433f2b77a6d80aca93
SSDEEP

1536:8uXVoXAgyOGERsM/0I12SfdGxhm9Yp6S9KhOLPF6zZ3VmVmGBRPjQBbWR98vi3Vy:hlWAng3lfsK9Y7AaK3KNjQBHa8VlJO8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61d8b551c2b3196e69159d066204998b_JaffaCakes118

Files

61d8b551c2b3196e69159d066204998b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dbe454b1e292824bbc9a12cc8a20b290

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
OpenEventA
LoadLibraryExA
GetProcAddress
LeaveCriticalSection

advapi32

RegCloseKey

ole32

IsEqualGUID

oleaut32

LoadTypeLib

shell32

SHGetMalloc

user32

SetTimer

wininet

InternetOpenA

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.itex
Size: 89KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE