0d45f332786c5bdeaa26b2280f076529_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d45f332786c5bdeaa26b2280f076529_JaffaCakes118
Size

4.8MB
MD5

0d45f332786c5bdeaa26b2280f076529
SHA1

972f89d83cb18541d5ac4173d21273097570a007
SHA256

4359f6d3fa0fe0b4b29f580aa78daf19795ec8a54ffe637befb62c4ed104f7b2
SHA512

d52508951373cc8be6cd6c76fa862e914a3ed1de84a4fcd3ec269f38e96c5f7ea2f1d2250d48b416f7f1e0b8705a8768176902a0b227598116a0a4a25c3d528a
SSDEEP

3072:Q1OpnJeyDzxtLhx3D4TRvt0ku01vn329gA3ctWL0neXi+INUiy:QcpvljxiG01f3+gMccKeS+INUi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d45f332786c5bdeaa26b2280f076529_JaffaCakes118

Files

0d45f332786c5bdeaa26b2280f076529_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

50cda8c2dd23cf82c147c56fa553a655

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

PulseEvent
CloseHandle
lstrlenA
SetHandleCount
GetPriorityClass
SetProcessWorkingSetSize
EnumUILanguagesW
SetCommState
SetupComm

ntdll

RtlUpcaseUnicodeStringToOemString

advapi32

ControlService

gdi32

SetMapperFlags
RoundRect
GetRandomRgn
SetPixelV
GetPixel
SetArcDirection

msvcrt

strxfrm
_amsg_exit
getchar

crypt32

PFXExportCertStore

shell32

RealShellExecuteW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ