be5e109bb2c2c56fb87c5baeba0e650d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be5e109bb2c2c56fb87c5baeba0e650d_JaffaCakes118
Size

151KB
MD5

be5e109bb2c2c56fb87c5baeba0e650d
SHA1

943597ccb52007ad4c69e7b27f7ddca90192bcd4
SHA256

4ea27c66ce1572ae6ac3747dc1c53435e6fb81c19686dec4f4ac89552c04b3dc
SHA512

452c6151ff88f0564f6b6fc063a30296aca6de44f06fb9103086134f8de99691ff35ae9679b2f62607dd48c4511514487418cebb96b36453c11f06dcefa8b774
SSDEEP

3072:FCRv3EuuccIe31IikPoX3YyNL2FDGjNChHAQCsXAbV3OgHWy6ST7xV:FCRvtFtJikgnY4E4WH7O3OUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be5e109bb2c2c56fb87c5baeba0e650d_JaffaCakes118

Files

be5e109bb2c2c56fb87c5baeba0e650d_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

be0672654ec4643ebaa0b32d6239b333

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryExA
GetProcAddress
LeaveCriticalSection

urlmon

URLDownloadToCacheFileA

rpcrt4

RpcStringFreeA

advapi32

RegEnumKeyA

shlwapi

StrRChrA

wininet

HttpOpenRequestA

user32

GetClassNameA

ole32

CoCreateInstance

oleaut32

SafeArrayCreateVector

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE