87c4aeb6aea07fb5ab1d63321e386a69_JaffaCakes118 | Triage

Sharing

General

Target

87c4aeb6aea07fb5ab1d63321e386a69_JaffaCakes118
Size

175KB
MD5

87c4aeb6aea07fb5ab1d63321e386a69
SHA1

2a6474986e32072b2f3f9085024bf2db8a1f8046
SHA256

f74287b4e63738f1bbc7642ad0bd6e8978aba6796a1f8321ede6472fe7bb93b5
SHA512

5c6deeaf1aa9398358c97bbd29abf786011302056d25d2078de34eb1f8f2d1b52eea1d20ebaa1494e184aad64baaaed83307c4f6e3f1340e7232e41ef9698e97
SSDEEP

3072:TvTkVsfXUBEFver3XU4/ccnQokUDh2ksjxh+XjNoRe4KyPnIATjgNLS8KoyL:Tb02UHHU7cnQW2kgLcge4XI4UNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87c4aeb6aea07fb5ab1d63321e386a69_JaffaCakes118

Files

87c4aeb6aea07fb5ab1d63321e386a69_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JHookOff
JHookOn

Sections

CODE
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ