86576d51d186ef022c4fd0f87a7215c4_JaffaCakes118 | Triage

Sharing

General

Target

86576d51d186ef022c4fd0f87a7215c4_JaffaCakes118
Size

124KB
MD5

86576d51d186ef022c4fd0f87a7215c4
SHA1

bf288531c7e226c778b65d9c36783d7bebe0c983
SHA256

704d66bce6c441de75e1217cc334ab83b7dd3a3f429d7f836d10ee63d7298b30
SHA512

e35984d5b768ba27e4aa20a981570695e8fc831d0a6edea607a42faf217a87b71e3b6cfa6afd2e5974835f6f4164197bcbf0429904e993af0e603a7783981650
SSDEEP

3072:0kx/KVK7n9FS7SB0T7b1kqSpiGNpTy9LZ:0ayVk9060T7b1cadZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86576d51d186ef022c4fd0f87a7215c4_JaffaCakes118

Files

86576d51d186ef022c4fd0f87a7215c4_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ