06b87d9e88a5221a9700c28c6cccbc6e_JaffaCakes118 | Triage

Sharing

General

Target

06b87d9e88a5221a9700c28c6cccbc6e_JaffaCakes118
Size

474KB
MD5

06b87d9e88a5221a9700c28c6cccbc6e
SHA1

27676a0bbef2a37dec5c49c5ce691c2f3a66d4ae
SHA256

7c13bd76323b08329aa45c0d375c08d664d3bf4556c290f1e0e8cb54933b2702
SHA512

8b48c6038197472b150c55cb4376a1127c125b70ac121bb6873f8d893342b3d2ec33cbcfb824f579d4aa2894eee27196b4cbf7e66eb3e2cd96e8b285523c03f8
SSDEEP

12288:pmft8PTfDzdyExHtWTjI/U1a6q1mGL1lEkuwj7g:otgf7ZtWrImI1VPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b87d9e88a5221a9700c28c6cccbc6e_JaffaCakes118

Files

06b87d9e88a5221a9700c28c6cccbc6e_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ