770f2a08754e87a9f17b4cae9a023375_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

770f2a08754e87a9f17b4cae9a023375_JaffaCakes118
Size

127KB
MD5

770f2a08754e87a9f17b4cae9a023375
SHA1

c01cedfe76cb190e3e12f386be1f0d17ac5ba8cc
SHA256

980898fe6606c9e3da56e2d5f8b4eeb848c005bb2abacaf0f26f85f5155d0452
SHA512

60f09f0ef5351b48bc212bf5cf2c42f2563cc17878dccd82c4b2daf9e0d3801c62cf2a49f9fe9dd56f486d1ce56bf5a96120bef606c704012657eed1339b51ed
SSDEEP

3072:EMpULZUQBkWpGrzk2SZ96Gyo4PTJAGpQse9UaM/HHyO:/GlUU/7ZfLGK59AH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
770f2a08754e87a9f17b4cae9a023375_JaffaCakes118

Files

770f2a08754e87a9f17b4cae9a023375_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

CODE
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ