a9c262263a97731695c145cf8748245f_JaffaCakes118 | Triage

Sharing

General

Target

a9c262263a97731695c145cf8748245f_JaffaCakes118
Size

431KB
MD5

a9c262263a97731695c145cf8748245f
SHA1

3ae9eb6a59a2781a0200a6663bdecb25bad92b28
SHA256

d5947b0895e46f5bbe244015bd2b46c8f13cb14d3ea7d71354913fe49a2316fa
SHA512

7395574cdaf33bcbe2ff96b042c6cc5a0afce1103a7b767143df6eaf57aa3f8a96b75ae454f1c04b9de903839df145b16c4a6fc9f3d4a4ecb9e8ece6d9fe03cc
SSDEEP

12288:PAvTlx/nWc7wMDhzPsIBrBcYzq9Yrzr6EJVQTr2QD:4vBwMtzkIBNc2q9m/ATr2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9c262263a97731695c145cf8748245f_JaffaCakes118

Files

a9c262263a97731695c145cf8748245f_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ