8befdcff1283d88b103f82f9ba02208a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8befdcff1283d88b103f82f9ba02208a_JaffaCakes118
Size

401KB
MD5

8befdcff1283d88b103f82f9ba02208a
SHA1

fe990d31db31ced9a62479fa8205a5669244a9c9
SHA256

f99a1d89425f38f38f5185313b93c89f61633b95f170bc1a62512c74aaecebea
SHA512

3d475b46c7ff46c7f58a4bd263012dc1f91cc04f449bec6fec2cbbf50435489ffe7de0022de555d14232148e97f82cc88b6697791108bc2bdcdedca7c2111c7b
SSDEEP

6144:fKrZJMS2gABvqVl28eDWRqzpjwxNPXIzDzLtwuAkgRFxBCjRkGecSFN1+BaTRs:CrZzHAMAD3+QzHLtHVgWq98aTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8befdcff1283d88b103f82f9ba02208a_JaffaCakes118

Files

8befdcff1283d88b103f82f9ba02208a_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

9760789fd680793f647f914844dd9226

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

IsEqualGUID

comctl32

_TrackMouseEvent

wininet

InternetGetConnectedState

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 372KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE