6f150092ad321362cd22ad8212c701c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f150092ad321362cd22ad8212c701c6_JaffaCakes118
Size

148KB
MD5

6f150092ad321362cd22ad8212c701c6
SHA1

e21a95018060e18a6105b53586533116101ed377
SHA256

3539d0b13a6f74ea3ca222464333d0c9748a4984a2bc6c4c4088b8ff0effab26
SHA512

f7750bd12a61d06539d3a496ec1a65690b6e88e16d710ad4ed656c3c037270c2dbc9c3197eb9ba0cf21476010ee42188e19ccbbe039b7edbe140a9197fac341d
SSDEEP

3072:dhcwL2t2Y5NcmlonAw7JTcKZ1f9BD9bh1rpmg7Zzj1o7e6y+TaXx6T:dhPut5aJ/hbLfotyya

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f150092ad321362cd22ad8212c701c6_JaffaCakes118

Files

6f150092ad321362cd22ad8212c701c6_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MainExc

Sections

CODE
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ