a65ae913154349d79e87b151dc0e1404_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a65ae913154349d79e87b151dc0e1404_JaffaCakes118
Size

100KB
MD5

a65ae913154349d79e87b151dc0e1404
SHA1

30a42a7b84594e42343f18f175b891c208321494
SHA256

9f34150790325e3edc73665779fbd198a343ae6834594563fa4fb85a90e38923
SHA512

58e609ea3ac5562f97a1fb24e09d3e908be14bebb2ce0f44ef88ed949c20064c688b44b719153e553a21f6f71abe59c3b1883496a47fc61bcdd247d1ddba9ac8
SSDEEP

3072:EKBscZp/F72u7+aaK+BB+uaKKbjqaqKbe+fg+8yilCC+iiyei+eafCpXOqWGW2JO:BBXLF72u7+aaK+BB+uaKKbjqaqKbe+f/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a65ae913154349d79e87b151dc0e1404_JaffaCakes118

Files

a65ae913154349d79e87b151dc0e1404_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

93fcd40ed5f58809c21cc3c1949a5496

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

actxprxy.pdb

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
DisableThreadLibraryCalls
RaiseException
LocalAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ