7330f5d6df0de6a65422948b0f1d5b0f_JaffaCakes118 | Triage

Sharing

General

Target

7330f5d6df0de6a65422948b0f1d5b0f_JaffaCakes118
Size

124KB
MD5

7330f5d6df0de6a65422948b0f1d5b0f
SHA1

aeafe1e491526184915763de9ee9fa647f388f4f
SHA256

31dadcfc38356089faac8a43c25a4647022daf6ac2b708742b5dca9fc1a6f129
SHA512

c376cd450bb1588749b959ff90d84be4ba8075c8dc5ba07beee17fd48edbc9ae9d9d3a6dd608c2a68b8dec0fbdde4800cfdf03dfc742e96cbaf33341734d3d6c
SSDEEP

3072:EkgHeBglvBIccuccLiqQnKkszaQ6PTXRB5:EkgHeBglpt9ccLfCKpaVbj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7330f5d6df0de6a65422948b0f1d5b0f_JaffaCakes118

Files

7330f5d6df0de6a65422948b0f1d5b0f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c2153053dac16dfda4acf12a50df55ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress

advapi32

FreeSid

oleaut32

SysFreeString

user32

CharNextA

Exports

Exports

DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer

Sections

.text
Size: 122KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE