7313da6dce3163e8b167c59d34d0de02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7313da6dce3163e8b167c59d34d0de02_JaffaCakes118
Size

616KB
MD5

7313da6dce3163e8b167c59d34d0de02
SHA1

da8af74afa71e2ff0e2ea2681c3f26f20fd6c335
SHA256

d5a1bca4d598b3eaeb3f52c862994f7d6ebfc1629a5cfa5f750a567e5cac79fd
SHA512

dd45f50a94241c84484035976216d32d63f59f73e388592b8702f8e3d198e4991dd5a31620648078262c92f0ea2b837c249ca211907dd1da5fdc9c638526d71a
SSDEEP

12288:vvchE5PBXcohP3HX6xZoPEDfXKtosy7Bf:njHAePEDaSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7313da6dce3163e8b167c59d34d0de02_JaffaCakes118

Files

7313da6dce3163e8b167c59d34d0de02_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 437B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ