118ff2621cce82219c5379fa64051bb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

118ff2621cce82219c5379fa64051bb0_JaffaCakes118
Size

136KB
MD5

118ff2621cce82219c5379fa64051bb0
SHA1

47945f4b2121294a40d0ab7fdcfa95ee9c87f553
SHA256

bc3294e4999799b63b9ab52ef2c84fe959980b6827e38a81b6a826556f70dcf3
SHA512

437211f562336770c5ce08ef0d5e17527f1743cf23095f0067c32478c5c178f0cbe882dcbda5ea5e7a3e388268cc94103996f255ad8d9c5c53bd3d044bea7e02
SSDEEP

1536:jFFd3vwqpEgg2OxmGuVcVjbv6Vmwk7QJDBdISMTpTJ/9n:jBpEAOEGueVjbPwZlE//9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
118ff2621cce82219c5379fa64051bb0_JaffaCakes118

Files

118ff2621cce82219c5379fa64051bb0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1fe6e706a2e5433bf23c2abbc7d6c7b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
strerror

advapi32

RegOpenKeyExA
RegDeleteKeyA

ole32

CoCreateInstance
OleUninitialize

kernel32

TerminateProcess
HeapDestroy
IsBadReadPtr
GetCPInfo
HeapFree
IsBadWritePtr
HeapCreate
GetLastError
DeleteFileA

user32

GetAncestor

Exports

Exports

OkpQLqcxGBuIludzGElO
ScYbNnzchvLAYuBz
gvDETrldtv
nWmCeGPljkf

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 901B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ