a34ed46e1dd7d09fd2a422c94bc164bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a34ed46e1dd7d09fd2a422c94bc164bd_JaffaCakes118
Size

29KB
MD5

a34ed46e1dd7d09fd2a422c94bc164bd
SHA1

9b3a98ac81f3e49b7781523a119affa1e9571428
SHA256

8ac72b462dbcbd8d68725d2ed8a42d38ba9ceefaef162cd233b0130dfcae48f8
SHA512

9754d90fb8397b75374df132e586b64243554300589825c4422db126142b219e787251973db835293dc62d5189668737d986e69c61b00a3ad2e2d7f29014b1ef
SSDEEP

384:tNNe06t9hcs/35DBKUHk+amzchAzSKByZGDE30EZsb4UoIl8WIHeJp3:JeP9h5xEcz1zNBFH0UvOWwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a34ed46e1dd7d09fd2a422c94bc164bd_JaffaCakes118

Files

a34ed46e1dd7d09fd2a422c94bc164bd_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJhjkFdsa

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ