950422988707f62b2dddf66588941fb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

950422988707f62b2dddf66588941fb9_JaffaCakes118
Size

31KB
MD5

950422988707f62b2dddf66588941fb9
SHA1

73d4e8e73e4d56d8aabae2d42cfffee483fd37a0
SHA256

2447ab72f7b6ca2377ca6ad358690d8412ca6cd2b8343c8d0a291277f8561a15
SHA512

2548c203454f2232994d9edb89ed16ad2eaca8d74e25d0b20c5edb49bce2e5c82e99012e6d718b2f4e4b0f73b6727e0d10b54ca98f8b5cd0f2a87ce70a7d8a49
SSDEEP

384:CNNe06t9hcymreMBuqJW43k8tNeMWqfmpoZ3rlNjfSldz28TIHD1x:WeP9hAW40MNepqe6ZhOTwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
950422988707f62b2dddf66588941fb9_JaffaCakes118

Files

950422988707f62b2dddf66588941fb9_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJhjkFdsa

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ