de69f105d7d8e5e7af29db877a3487af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de69f105d7d8e5e7af29db877a3487af_JaffaCakes118
Size

82KB
MD5

de69f105d7d8e5e7af29db877a3487af
SHA1

de4ed1e8eeb94a42f16889aaf8dbb764f238f0a3
SHA256

32d3a8e53122cc5c71e0025b4f7d2cda18c43466e3e37e30bd4f9148439020a4
SHA512

75c5c5f6a1bfe772152446344d2a7c3b61842e0a5699a101c559751834565a87a2cecb4559d9ecd70953a7efbfd11dae52cd500aeef0a227e51402bbc5108b7d
SSDEEP

1536:6NPQdLpG3394UagHveKdaCOWPW/ZGo9sZeHv1qylzsAF2V+:6oG33uUaLaaC7MpKhysAY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de69f105d7d8e5e7af29db877a3487af_JaffaCakes118

Files

de69f105d7d8e5e7af29db877a3487af_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

9ee1cba00cc5292a9e2bd975512b3217

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryExA
GetProcAddress
LeaveCriticalSection

advapi32

FreeSid

oleaut32

SysFreeString

user32

CharNextA

version

VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Gakncap
DllMain
DllRegisterServer
DllUnload
DllUnregisterServer
ServiceMain

Sections

.text
Size: 80KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE