37df27c85b82b4401257a94a8338f692_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37df27c85b82b4401257a94a8338f692_JaffaCakes118
Size

127KB
MD5

37df27c85b82b4401257a94a8338f692
SHA1

53b8d2f14e23017c529232adb22d1570b75b3c77
SHA256

0227c11beb369652558d982ec7f8203b99b64f948cc754a20230b5b888dd807e
SHA512

0110f98c93e0ec0eb22c20c73725bf313cfa95952aa7b99465370f96f662b5a0e59712bc41361498108e8fed54f654583eab9cc38d1d796e2fb3e9d18502c808
SSDEEP

3072:AMpUL/EdUwFwr1585Fc+aTVXOi62b4YYQb2NpUWVdns8Sb8yO:DGgdUwmQbI1l2NpB3npSb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37df27c85b82b4401257a94a8338f692_JaffaCakes118

Files

37df27c85b82b4401257a94a8338f692_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

CODE
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ