6779559995b76c5de2f27c021e47f8b8_JaffaCakes118 | Triage

Sharing

General

Target

6779559995b76c5de2f27c021e47f8b8_JaffaCakes118
Size

142KB
MD5

6779559995b76c5de2f27c021e47f8b8
SHA1

89118ff44fe9d6cbe5e3dbaaeafa3a773e9c548f
SHA256

395680472b87acb1119ae216478c966d841d0ee77c4fa2239d8aea383a90bdd4
SHA512

338cf610779e6a7e62dbdcd3453011bf8c0d8df03735125506f35976ed928a043cfaf831bd488bef5c94123044d124bf01ab076c455fe99a12eabc2765d37a22
SSDEEP

3072:JI8CXqlqr1giQ7hDIY+uJWxbaPZiRg7ZGGx53SCrVgHU0vs+FUv5F:e8CXqMaiE5+3siVGx535rVg0+zq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6779559995b76c5de2f27c021e47f8b8_JaffaCakes118

Files

6779559995b76c5de2f27c021e47f8b8_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

f2ada531932f3e2e0fb7c71cd19f0936

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

gdi32

GetTextCharsetInfo

advapi32

OpenServiceA

shell32

SHGetFileInfoA

ole32

CoTaskMemAlloc

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 53KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE