64a2be6ba27ab1c23ad13d3525a228cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64a2be6ba27ab1c23ad13d3525a228cc_JaffaCakes118
Size

384KB
MD5

64a2be6ba27ab1c23ad13d3525a228cc
SHA1

054662523371eb4a3e6ddcb677ab8d949758090f
SHA256

1475ec1a58dd055dad81ab2a5240f3e86b5aacdaeb7557c36de49d765d9d490f
SHA512

72f3f8207563425877ba8cf8d1d41d1aedf94ca093592815c9699d8e8487c5efd2ec367af3bee41ed0b985679d366f01e53a19ed84496a8f3e8cad81c2eda668
SSDEEP

6144:NPw8r6+BFkQjlh8omn62CpDETMjQTBJnxyNjl+mzKZxs:NTrjlhVmn622eMjQTrMjx+Zxs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64a2be6ba27ab1c23ad13d3525a228cc_JaffaCakes118

Files

64a2be6ba27ab1c23ad13d3525a228cc_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ