3b54c28e9a17001fda45c313e53995da_JaffaCakes118 | Triage

Sharing

General

Target

3b54c28e9a17001fda45c313e53995da_JaffaCakes118
Size

84KB
MD5

3b54c28e9a17001fda45c313e53995da
SHA1

ff61de93eb974ca87a5b5f97b38b72a9bc55e26a
SHA256

3e046deea379548ea0a09f32cd2d320c2cee90d02d9f1d2eed09ce01128572ea
SHA512

fefe67768699ecaac5d4840c49ef1c3c6553136ef53358781a00540cea4832cd2fd2ad2591a23ceeccd97657d4da085a9b21b7c0050607cf98b11aaaa8eb0db7
SSDEEP

1536:jW2VbNh7hb0k3HvEJMTfjPxT+wiyf2T/5jhPNv:j91Thgk3HvKaVTX2T/5jhPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b54c28e9a17001fda45c313e53995da_JaffaCakes118

Files

3b54c28e9a17001fda45c313e53995da_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ