a8b970888cdd89e32716800bef02ca74_JaffaCakes118 | Triage

Sharing

General

Target

a8b970888cdd89e32716800bef02ca74_JaffaCakes118
Size

220KB
MD5

a8b970888cdd89e32716800bef02ca74
SHA1

0c321745b0d0484df4db1e46247372752b8dbca9
SHA256

7ef1ae1db4b652fb79ee1ca50a411c56d3e86a4887dc99ceee86e9953ce2c145
SHA512

d9ac3d7cc35b3077191dff9d77ccb17afb0b5fbf6d38cd2a23147023ef66ca9690b4ba99838ce5280fa41aa8bbeb7b24aec6ade93e5e5d27a2ac364ecece5dc7
SSDEEP

3072:XJohAfhKBJ9R+An0AzIzcJVMbbpKApMwIhNieXD11a8YBJa59ErZf6VfUoz:EDv/ztVMbt58NbxHYSyp6xU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8b970888cdd89e32716800bef02ca74_JaffaCakes118

Files

a8b970888cdd89e32716800bef02ca74_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ