83eadfe4a998aa5f5673341a6309ad66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83eadfe4a998aa5f5673341a6309ad66_JaffaCakes118
Size

44KB
MD5

83eadfe4a998aa5f5673341a6309ad66
SHA1

99ff8215caad025fc44d422abafcb451d25ff80d
SHA256

be9f101df3f23d1526de76c91c6a8670067f985234a473f0418c46c1ebf8fd11
SHA512

a91eefbd7afffffca7b8bab4c196fb7da920e83b4834c298dfc26c292af839808a01cc378c8828a9a228f7cb3fa44cc3d67c7831e6ef2acb132cee249e12982d
SSDEEP

768:SClqnQnm9rq6D5/wX9A50PWiO5OpBls6biEAtmB3WgAzNB0x3q46s5gy:VlqnQ7O5/wtA50PWiGOpBlsSidbnz/gB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83eadfe4a998aa5f5673341a6309ad66_JaffaCakes118

Files

83eadfe4a998aa5f5673341a6309ad66_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOn
MsgHookff

Sections

CODE
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ