8537a6ec34abbb4338c0e653d2655824_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8537a6ec34abbb4338c0e653d2655824_JaffaCakes118
Size

71KB
MD5

8537a6ec34abbb4338c0e653d2655824
SHA1

4e382aa87e5d76675181f78e67c74472abb0a12e
SHA256

b71ff49110e9bfcc8ee10be1244570f5ccaf8cdc82d3e50f3c506570f5d4ed1f
SHA512

18ed2fe5073cea6c8b0feec8fbf3b70915f94e76245dcebaa935e92c95773f1475123cc59a0337cf9d859286dc7bd765fd267c4585cbae7bf5e98b7272394750
SSDEEP

1536:egI0nU8TWvSGnxdcky+BK7D/EKSuvpNYEommk+Vf7Z5NYO:He8QjxbWLSu7umF+Vf9zb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8537a6ec34abbb4338c0e653d2655824_JaffaCakes118

Files

8537a6ec34abbb4338c0e653d2655824_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 58KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

sotledd
Size: 1021B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fdauegd
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ