60ba274c73397a3bdbeec7ed8b808e7a_JaffaCakes118 | Triage

Sharing

General

Target

60ba274c73397a3bdbeec7ed8b808e7a_JaffaCakes118
Size

684KB
MD5

60ba274c73397a3bdbeec7ed8b808e7a
SHA1

6f30bf8802c21f8477866dda48a76a5f9ce58ff9
SHA256

c02b48bdb9122649ed5664189abec10a49dbceb0513667a830e23120691e479b
SHA512

85e4610acf690a2604d5a2b8f04137d7e38e3e35762291d9e6e375bb668aab8613907199292bae59489ed2da383b4de0a8c430153ac5b9c09bb3fa64af710208
SSDEEP

12288:4dUXYC8MJIdwKRKEZspirlD41dN1hPHBwDjHdx44OFg2tePm:4moCHJB6KE2ISdVPHBwDTvZO+A+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60ba274c73397a3bdbeec7ed8b808e7a_JaffaCakes118

Files

60ba274c73397a3bdbeec7ed8b808e7a_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ