761754a105639abb15b4b87e1ab48c33_JaffaCakes118 | Triage

Sharing

General

Target

761754a105639abb15b4b87e1ab48c33_JaffaCakes118
Size

28KB
MD5

761754a105639abb15b4b87e1ab48c33
SHA1

b69aed8f0956720726b7da3b9033cc7b19e9721e
SHA256

34f2ce4e59505ac46b37629a8576980d847032bae1f6da8c071f0e842755f071
SHA512

47f3c6961b38111465b8fe493794e413f5e29c7d87aaf14bcf3a174984b6bc06ead205b9e76f18ae0fcd891bfa8404a647175862b4f6baaac46bb1c8dc0194a2
SSDEEP

384:SAHxUSEqujwdKnGQmrjtlpKQfxWaOPJDbJI6f4O1KV7EVI0qmYpTpq/gAzGA3A5C:PKSEquMd0GQ835ODbJbYdUNGBe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
761754a105639abb15b4b87e1ab48c33_JaffaCakes118

Files

761754a105639abb15b4b87e1ab48c33_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ