1ab54d486d18e4ace8f626de709bee7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ab54d486d18e4ace8f626de709bee7d_JaffaCakes118
Size

9KB
MD5

1ab54d486d18e4ace8f626de709bee7d
SHA1

473a8f92a97726686acd3e7e076543e977179918
SHA256

9a08605a18ddaf9eda67a575ec5b402d3f29a17b177715c16db66abc163aae8c
SHA512

375967db6b8600b01aea8a635830faa61be878691432f3b81e6fbfb00fcb57b437c7524dcc6740601b7d8c9f1cc7d56ea5f8bc48652dfa22cffb4a0d144f4bbb
SSDEEP

192:CaUY116gi8hEGYGOQ9jS/8AP/T8s8XGx0nbIwU8wOkgU2C9:CNYD6gfhBaP/d8XPnbIwO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab54d486d18e4ace8f626de709bee7d_JaffaCakes118

Files

1ab54d486d18e4ace8f626de709bee7d_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllRegisterServer
DllUnRegisterServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ