b9ed437b236759504831018361597122_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ed437b236759504831018361597122_JaffaCakes118
Size

1.0MB
MD5

b9ed437b236759504831018361597122
SHA1

c63808b306f35f1716f95aa3c539eeddf82643fc
SHA256

f5bec1a2f91adb7dc969e35b6204d2a43152748600174faa889037a2d385d0a1
SHA512

3c48518f0e1a27625761f774ccd2a1ebe203bd3094e54aa79772dbfe74a3377a434ea3a73326388fb1ab931509429092762edc4950be263c5ab032073575e378
SSDEEP

12288:YV5idJc3hY3jvTFTmsUmOlpOmWDRXFo6hwefTeStnYG8T4oX657:aknc3hY/FTm6JRR66hw0dtnYG8T1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ed437b236759504831018361597122_JaffaCakes118

Files

b9ed437b236759504831018361597122_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DispatchMemory
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IAlloc

Sections

.text
Size: 692KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ