3d90b49c84eca9f1aa29e81475c16db1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d90b49c84eca9f1aa29e81475c16db1_JaffaCakes118
Size

411KB
MD5

3d90b49c84eca9f1aa29e81475c16db1
SHA1

9efb1a05a8a909285013131286ec26e2344496a7
SHA256

6dfd17f7abac87307714946f8e65e7048273ed9464a8dab3f7a8a32c2a097bb5
SHA512

445602b134bc76f3872bbbbc1413585988fd2ee572efef0471462393163fe1bf88b93d1a3b72b1fbee4d6bbe0d555ae3c089bca99a5b5bffed61adec60c27c7c
SSDEEP

6144:y1xV5t/c3JX3uLMfB6sLs/JTE8H5XPpn2cux9B2dwWy7EBE/2PErhx/Zau1aSf:6vIlYGshT1G/8dwnE86ErhjgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d90b49c84eca9f1aa29e81475c16db1_JaffaCakes118

Files

3d90b49c84eca9f1aa29e81475c16db1_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

8f3641dd05a30e5a00cd34019ad38bb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

RegCreateKeyA

shell32

ShellExecuteA

oleaut32

SysAllocStringByteLen

wininet

InternetOpenUrlA

ws2_32

inet_ntoa

rpcrt4

UuidCreate

atl

ord32

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 409KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE