34db018a97c36576593d161688ab6735_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34db018a97c36576593d161688ab6735_JaffaCakes118
Size

562KB
MD5

34db018a97c36576593d161688ab6735
SHA1

ce02180e283bf5b6c6e09da26558b7e218c79ba7
SHA256

f877368dab890f4c299edc6b1e5272bc2b9d8c1afbc3299e398b19b2ef6b95b3
SHA512

c8fd7412ae5b63e1756e091702261beb71a75c251fb378a2397f6e3dba6cac8538eeb912956dfce56a932430cd06d4288eb74672dda27707ec831bf55cf2b73b
SSDEEP

12288:i0Et9YDc/Tk4Po4wSSqodPF9C2vTgYnnPLPD7R7t:ytWDcw4o4Ts/9CknPLPPR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34db018a97c36576593d161688ab6735_JaffaCakes118

Files

34db018a97c36576593d161688ab6735_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 485KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ