1a4ba01e5994361c80443370d7a6d40a_JaffaCakes118 | Triage

Sharing

General

Target

1a4ba01e5994361c80443370d7a6d40a_JaffaCakes118
Size

56KB
MD5

1a4ba01e5994361c80443370d7a6d40a
SHA1

69caefbb1f0dc35c3dfebf73e59d1d8f2e61240e
SHA256

28a63550754a289ec0a368f7ae1076dbb861ea1daa4cf194ede79fb91f0a66d3
SHA512

d8eec87b8603510cd5698551ee1063eec3d72141d099c1a4e490d71d4dc1085a2b8f61c4abbfe2a061bd902b5f7a44ad5a95975c99fe5f69b449bd2e785fd99c
SSDEEP

768:xbIYz7tJhGuiRCRyIwfMhXmm1Lmaon4ZJVwlCdf06No2s:xbIYHxGuTRy1fMh1L9+AVNdRfs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a4ba01e5994361c80443370d7a6d40a_JaffaCakes118

Files

1a4ba01e5994361c80443370d7a6d40a_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Fn

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ