83500d22e713fa0c6d93b4dbb5aead87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83500d22e713fa0c6d93b4dbb5aead87_JaffaCakes118
Size

611KB
MD5

83500d22e713fa0c6d93b4dbb5aead87
SHA1

0294bd996b345fe84f097f995b1f025450ce5809
SHA256

b2bfac3dbaf7e25d5d0076f0330f6e50f7386f3e1fb432c0c1a81c28293b170b
SHA512

1274ca7a22de9cf5529da94107b48000021b2c37e09c89fec2ce6a77088fcb278fc08a261e246a3bb53b1a1a5f5d65cefceac14feccebc48eeb72f354534cbc2
SSDEEP

12288:VyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvidARrIVBwmHeIBv7pj:11fqZCHwIr00taCiHR6YIFeIBT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83500d22e713fa0c6d93b4dbb5aead87_JaffaCakes118

Files

83500d22e713fa0c6d93b4dbb5aead87_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 485KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ