ae5295bad2cfadeaa0792e083d1c2cdc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae5295bad2cfadeaa0792e083d1c2cdc_JaffaCakes118
Size

98KB
MD5

ae5295bad2cfadeaa0792e083d1c2cdc
SHA1

24b27574133ef60b49f3a4fc3929882a63dd7fe8
SHA256

e0b9328535605dd38c083edae2ce8202b115326bbe36f8cd5a864c2bd53954f8
SHA512

4925b7c9b97cceef40e656173f2ec7619e3900345f4f73d890c252ae181c9da3aac59f1fc2b3d37d35b49c1e5aad11c2ad187beaf62f0d5e745ff716ec1bfdaf
SSDEEP

3072:0PdfpDccF42AYP38ksDdp46d44PEyqxDm62:0tpDccF/AksDd6/UlqxDI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae5295bad2cfadeaa0792e083d1c2cdc_JaffaCakes118

Files

ae5295bad2cfadeaa0792e083d1c2cdc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b149d728199f49820617d5efb5a08362

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

oleaut32

SysFreeString

advapi32

RegCloseKey

user32

CharNextA

gdi32

SetROP2

shell32

ShellExecuteA

wininet

InternetOpenA

Exports

Exports

CPlApplet

Sections

.MPRESS1
Size: 95KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE