6f7016d3cf5f5405bee6674f04a2a114_JaffaCakes118 | Triage

Sharing

General

Target

6f7016d3cf5f5405bee6674f04a2a114_JaffaCakes118
Size

253KB
MD5

6f7016d3cf5f5405bee6674f04a2a114
SHA1

0c3120ad856afff63ddde41ec416f095f17b4136
SHA256

778c968a48cf0335157a4334520956c30042a0210ca291d483ef4a1dac605704
SHA512

f991be8389f16b069469d2d50b8dd1ddfcf1d20ab8b67bb818a44c14845eb39a16b61a069e2c408c67e06f492c9052a4488965f92b2807bb67f741b897c560a1
SSDEEP

6144:hZhtaAxS6CFwoss6RzAujHJAjSrMj2eo69Yluq/L7RTZsHK4ojA:3/aAx2Es0zJAjSrMCr6GlLhZsqjU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f7016d3cf5f5405bee6674f04a2a114_JaffaCakes118

Files

6f7016d3cf5f5405bee6674f04a2a114_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllRegisterServer
DllUnregisterServer

Sections

.nsp0
Size: - Virtual size: 840KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ