8764b13084d2e9b4468934e6f1afa9a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8764b13084d2e9b4468934e6f1afa9a4_JaffaCakes118
Size

97KB
MD5

8764b13084d2e9b4468934e6f1afa9a4
SHA1

388797e1b75f88e50b8bf262990d5ccba0c297cc
SHA256

17243b2674f8254e76c05c48bfe48a9732be4df1befb7944ef01dbb1a1233060
SHA512

59e994271041a1230a131d334a47ffcbfa3385ba227e4a21eb80f62d89ceb1762f2c68156f6d2ef6795eff6da1704fe76e4215e55f5bb3f825600e4952212b43
SSDEEP

1536:eT8A/sckLltqj+Qa6aLIcLzVRBft6PPx7l9z2UUsDZM1s1mEFHs2Qt8ZwPSs2EKK:eUXlFI6Kpyss2qQwPyEKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8764b13084d2e9b4468934e6f1afa9a4_JaffaCakes118

Files

8764b13084d2e9b4468934e6f1afa9a4_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

529eec90942b849c7b88958663d3d3ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
SetLastError

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ