c7c38a7095f5654da06bb3e0e30f56b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7c38a7095f5654da06bb3e0e30f56b8_JaffaCakes118
Size

101KB
MD5

c7c38a7095f5654da06bb3e0e30f56b8
SHA1

d049b5ebd6149fd0783369af448af0b25cf73aaa
SHA256

476f60e2ce3cee1e72e888f4fb4de9052778f1404fdbe8fe333d2a0e5ed2d71f
SHA512

ef0313d59c45e13f01c4bfaa4eb1b303a7965370dad1177cc16fc5f489d5de3ce5db7536add1e30d65e50026fc01a534de1b23f0669c1f2772dc06c3c58d74b3
SSDEEP

3072:9/ZwQpLCI9FFoE3TH0zx7RNG1ZoAlOsv8V+IU:dBpOuRSRNGzolLYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7c38a7095f5654da06bb3e0e30f56b8_JaffaCakes118

Files

c7c38a7095f5654da06bb3e0e30f56b8_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

2ba4bd930d82541bfda41a9c88f20dc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjectsEx
GetFileAttributesExA
GetProcAddress
GlobalHandle
InterlockedExchange
LoadLibraryExA
EnumTimeFormatsA

advapi32

FreeSid

oleaut32

SysFreeString

user32

wvsprintfA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Kcomhgb
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 98KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 224B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ