59b23dc86862830de6ba7d4ce3806bbc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59b23dc86862830de6ba7d4ce3806bbc_JaffaCakes118
Size

629KB
MD5

59b23dc86862830de6ba7d4ce3806bbc
SHA1

7920c348b4f26784cf2d5ef8fb99fa680cf31741
SHA256

fe7d2209b3f837c3f8595fb8091dca33caa65c955d173ba1f68e920bf1ccfeb7
SHA512

2639f91cb8c3037f741f90275475154ec8ae5b815d2f852374557431e6c025f6c3bb5cdf4268400d7fe6f78c453cc26bc78cba36a5f349aa1a9884a86003f61a
SSDEEP

12288:zhE5PfUs4xvEWq5Al1JvZofEDfXKtoMvcn7Bi:wfWx1JvefEDaSMvL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59b23dc86862830de6ba7d4ce3806bbc_JaffaCakes118

Files

59b23dc86862830de6ba7d4ce3806bbc_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 441B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ