a3ae67c85429235640b573ae0ae1b6c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3ae67c85429235640b573ae0ae1b6c0_JaffaCakes118
Size

209KB
MD5

a3ae67c85429235640b573ae0ae1b6c0
SHA1

cbfb83622ad916bfe781926a9ff04ad3918dabd9
SHA256

51f361c3558783478448c99b835c8c12ef53adff161b4e9dceabf81c06ad03d8
SHA512

b172d086a76e526db887a57a73cf17f6b6f5135d4ecd59581417f98b84d488fcaf1ffebffd1095ac9f8bfb57bd1e29311220ac3f224a31efa048efa4f7026109
SSDEEP

6144:Hi4ecKtoHcZhcFrHVpfD23CTSAn0TyXg+70V6pT:HiGK+8TKrHK34So0TyXb70QpT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3ae67c85429235640b573ae0ae1b6c0_JaffaCakes118

Files

a3ae67c85429235640b573ae0ae1b6c0_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HxGetObjectCA

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ