700bdaeac54d854bb6ec98faf79cfd3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

700bdaeac54d854bb6ec98faf79cfd3d_JaffaCakes118
Size

33KB
MD5

700bdaeac54d854bb6ec98faf79cfd3d
SHA1

97210e2fa538089e43c71d665ce8b80ce33b8baa
SHA256

4ca8e58052006348ba6c7dafaacfcb1e86d6dd2f1aab10ce1c9f16f4683a3b18
SHA512

9027750a7202fae04f8cd71a16c9fece8dce44cf944deeae9246ae036a66f42cab8c4409e4e78c5ee7140accfb70d65e6653b6e9bca7b648961fe897d37d3e56
SSDEEP

768:jr+SACC8pEmtqwkEKYG0tvVtTqtdKrgKJV3M:v+SACNkD8TtwyVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
700bdaeac54d854bb6ec98faf79cfd3d_JaffaCakes118

Files

700bdaeac54d854bb6ec98faf79cfd3d_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

CODE
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ