8699aa0e14ed3089edacdd9720edb807_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8699aa0e14ed3089edacdd9720edb807_JaffaCakes118
Size

280KB
MD5

8699aa0e14ed3089edacdd9720edb807
SHA1

30b115b3781a640822aa0b96e67604e642eb7adc
SHA256

6c6776aeb6596cbe9dfce93546c6af3b12c9266c955ba94af662f3d9375a69bf
SHA512

aa613d5c590b4cb03dd447fd0e408c9ec9beb7cd165c0cbbf739430212b6ab4062f576a5f172b60a8d40fa0d13adfe85bf5914a7fb66731a6cd619cf42d386a6
SSDEEP

6144:uAi3c1gsjxs2fAmDHtW6EWrh6E7F+qiHTYK/aFja:B1gyC2ImDNWi7h+qiHRaFja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8699aa0e14ed3089edacdd9720edb807_JaffaCakes118

Files

8699aa0e14ed3089edacdd9720edb807_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ