2b6831140b522d9ab7de084009b765c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b6831140b522d9ab7de084009b765c3_JaffaCakes118
Size

84KB
MD5

2b6831140b522d9ab7de084009b765c3
SHA1

2e7d7b0b084ad0a7bf7290de6b05727be1e8ae9b
SHA256

e542d64418557944196a18a0a188a61ab22474d4c108242b9c726d7a000e3e63
SHA512

b78017180a8aaae236f996cb5e3df92b10bb423f27c3e18751519e6ca1d98a8cf314a7915210c933de5e4f76673e3f255bf16f1545ad5df6e72ae68d1d341626
SSDEEP

1536:yKnYPuKhJxmECuFi3tUQQRSEq0jWNAtApf4A4ml:yKnU/CwhEx2clv4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6831140b522d9ab7de084009b765c3_JaffaCakes118

Files

2b6831140b522d9ab7de084009b765c3_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

y7l75z
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yez7
Size: 54KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE