eef7c06412db6cefba50e70ceea9813d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eef7c06412db6cefba50e70ceea9813d_JaffaCakes118
Size

244KB
MD5

eef7c06412db6cefba50e70ceea9813d
SHA1

fa5998e76014ac71a4f9c7d3e2e7e9290b81b70b
SHA256

6f43808d78f5f76cf5a5f0cf4a54e6ea6b48f222209d6c7c6692f37e08c70461
SHA512

775215fe6de4962750af3d2458a6637a48ea813ecf0a29ef718ec030f3a37492678cff82c0424d441e963bc155160821d58cc0c13044f3495170958749ad48d7
SSDEEP

6144:bVyl6VBCVvmrdqbzsP7T8g7ZawRWaDUG1h:SmxMsP7wg7wgzwGf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eef7c06412db6cefba50e70ceea9813d_JaffaCakes118

Files

eef7c06412db6cefba50e70ceea9813d_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

a2ffe374e2dec6c3c25c14be4f4cd4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
GetModuleFileNameA

user32

LoadStringA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA

ole32

CoGetMalloc
CoGetClassObject
CoUninitialize
CoFreeUnusedLibraries
CoInitialize

msvcrt

malloc
_purecall
_strupr
_adjust_fdiv
_initterm
??3@YAXPAX@Z
__CxxFrameHandler
free

Exports

Exports

DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ