68a4b692c170295f203a7ffafd5973d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68a4b692c170295f203a7ffafd5973d3_JaffaCakes118
Size

124KB
MD5

68a4b692c170295f203a7ffafd5973d3
SHA1

3d087e0d137ce4a8e4ef590ab4c49a1576aee9ca
SHA256

f6be63caabb733e7f9ebca007eeb2f08712eb5ad8f295d28bf8192e7c4964fca
SHA512

4bce3a1caf117f17ccc7033a72effbea2585fcdfd99ab51b924e675284dc69288376af0c2892bdbb243e09865dcc9a79ad1c75654aba5cdab26ced8e914f0f7e
SSDEEP

3072:wkAVggpWpz+ceMhZ2T0yTH2en5CwNBtE:f9goz+cRZ2T0yjD5PE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68a4b692c170295f203a7ffafd5973d3_JaffaCakes118

Files

68a4b692c170295f203a7ffafd5973d3_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ