8501686338ce49fd52f565fe37b7e71b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8501686338ce49fd52f565fe37b7e71b_JaffaCakes118
Size

518KB
MD5

8501686338ce49fd52f565fe37b7e71b
SHA1

f1d34bc90a23d878af0695c26d00a8dcda58762a
SHA256

dae60cd56fb0f21b770cc98a747371f6e4dc46763ec1a3b94bcaa214227a0cc1
SHA512

86d850c1375d3f9c174acc675c7fafee1d984c752f8336d7d3b839af1af397b29437aa2166007b6919bbf2958f2fd5eb53289ed6bfcd72d5a2bc77b529806ba6
SSDEEP

12288:UD20gwjoMFyEHxsOh7Z5yq1vpKvU6R//J1ejD:UDVgcyEHxXh15XD6trW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8501686338ce49fd52f565fe37b7e71b_JaffaCakes118

Files

8501686338ce49fd52f565fe37b7e71b_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

e14f35f4b43dfbf4ebbc3aa98d0feb68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

IsEqualGUID

comctl32

_TrackMouseEvent

urlmon

CoInternetCreateZoneManager

wininet

InternetSetOptionA

shell32

ShellExecuteExA

comdlg32

GetOpenFileNameA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 502KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE