64204614037aa0378976491789618400_JaffaCakes118 | Triage

Sharing

General

Target

64204614037aa0378976491789618400_JaffaCakes118
Size

220KB
MD5

64204614037aa0378976491789618400
SHA1

86a0365704921d0a944f76b2bd5ef000e27056db
SHA256

d8e0176f870e679c4b296a7b5dae49921a460b59d3b3e261e76b61f2d88620d5
SHA512

76c35a061d1801e43f02caa5b5df7b09cf097fef32e07e2b9fa8ae4bc9c99bd276045fee7bba98e51cf30b4fcf92394bb5cf007ad8e065c7511ece191e6e65fe
SSDEEP

1536:pkfZ+l7oGWnM6zkfZ+l7oGWnM6zkfZ+l7oGWnM6zkfZ+l7oGWnM6zkfZ+l7oGWnD:qGW/EGW/EGW/EGW/EGW/EGW/EGW/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64204614037aa0378976491789618400_JaffaCakes118

Files

64204614037aa0378976491789618400_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ