9536faf5dfe169715ffd8be87cf3d557_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9536faf5dfe169715ffd8be87cf3d557_JaffaCakes118
Size

563KB
MD5

9536faf5dfe169715ffd8be87cf3d557
SHA1

ad5d810b7c85b4a9be386ce75777a63ae49a5910
SHA256

80a0e27d52b8eaf770962276f1dc3b011b897ecbbee174214ec1672a70aa820d
SHA512

f07a897716233fd096c38f77d108ac48613463e8b1b1b76b2680c12ae8bd86a16d29a83f37506e2e3e403c2cb48f1e34759d4baabb8082d4ceda60800fdc1b9f
SSDEEP

12288:e0Et9YDc/Tk4Po4wSSqodPF9C2vTgYkcIIlq4t:OtWDcw4o4Ts/9Ckk74

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9536faf5dfe169715ffd8be87cf3d557_JaffaCakes118

Files

9536faf5dfe169715ffd8be87cf3d557_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 485KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ