87b2e1d4e9bb68f5c1e644e55e90c82a_JaffaCakes118 | Triage

Sharing

General

Target

87b2e1d4e9bb68f5c1e644e55e90c82a_JaffaCakes118
Size

652KB
MD5

87b2e1d4e9bb68f5c1e644e55e90c82a
SHA1

f1d33e14b2cd70ad487f083cac5328bd0ace93ad
SHA256

16a5f69f537b199b9334f55eb0e44ecae6024994cd9ee91441f1057ad18e7a13
SHA512

9fea3f494c9770c146b9e02430ba61f94ea7502080ff79f69ec68900c7794865c644090c2ff82dc00c3c29100d3194e390f4a3d25b82263a1b531cf521a41259
SSDEEP

12288:Ctv0EYFWSCJZu51oBcvZHR1LL+Z6biLUWJy1BWcQSHCqmoRIZ0bWt5l6obT:2MEvSwsZBR5+UiLTiEpoRIubS6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87b2e1d4e9bb68f5c1e644e55e90c82a_JaffaCakes118

Files

87b2e1d4e9bb68f5c1e644e55e90c82a_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ