0799b9f3d027b035a25f0e46ba46a1c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0799b9f3d027b035a25f0e46ba46a1c7_JaffaCakes118
Size

76KB
MD5

0799b9f3d027b035a25f0e46ba46a1c7
SHA1

89497a5f5897557807fc712ed08ae0da902cbb40
SHA256

e98626a7ef625fb8faae7684414f210643c677c90014d3b8604e6a3444035dcd
SHA512

774ccf633f0f1bad65a72ea2c0d7d564c147591ea196621bdae2e1ccae20524026fff5d563c362bd45f54e239fe7f4bd8bf7bcf52e062bc36a72a9a2287edc6f
SSDEEP

1536:jee45nts1ChTSSx0QerAU5V5ZG+nLY9t+t7cAIsG:X4xhhTz5ubLey7lIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0799b9f3d027b035a25f0e46ba46a1c7_JaffaCakes118

Files

0799b9f3d027b035a25f0e46ba46a1c7_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

f5cbe1f2892e527404bc580402775e60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

FreeSid

oleaut32

SysFreeString

user32

CharNextA

version

VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 74KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE