15091272b9b5af44eae171b9e13c99c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15091272b9b5af44eae171b9e13c99c7_JaffaCakes118
Size

124KB
MD5

15091272b9b5af44eae171b9e13c99c7
SHA1

a26cad332026582fd3f8d5a10c2ef418b4f75b62
SHA256

b74cfc25763f9d642e1b811e976864fd7b8583a91e9b236f3aa4cdcbe09a7184
SHA512

9cfd8a9a1bb5424eb129b772398f5b9c84b646025a9a600ece028dd43c6aa161b40ceda47a5812088abbb28d3e23cc4b427a7e5c44814aa425dd3863b91fd379
SSDEEP

1536:tTFoDSlF2TvT+mKxn0Qlrv9gUttb2PuKIt4p4abOk02WtOoA5h9x2pJexoG:tjlF8+JXrdb6uvtwJbOGaOoASzi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15091272b9b5af44eae171b9e13c99c7_JaffaCakes118

Files

15091272b9b5af44eae171b9e13c99c7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9b48827ac564a8a6e9577e8efe96198e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
lstrcpyA
lstrlenA
LoadLibraryA
GetProcAddress
GetModuleHandleA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_except_handler3
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

ActiveX_
ActiveX_1
ActiveX_2
ActiveX_3
GenHWID
LoadAllDll
PLCloseDevices
PLFindAndOpenDevices
PLSetCurrentDevice
PLSetUvcDevice
ReadExtUnit
ReadReg
ReleaseLogObjects
WriteExtUnit
WriteReg
_declspecs

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ