a81000fce724e12ba219dd736ab7efd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a81000fce724e12ba219dd736ab7efd6_JaffaCakes118
Size

90KB
MD5

a81000fce724e12ba219dd736ab7efd6
SHA1

14097daf77f8af82cd5fd14806eeb3b9f26bae73
SHA256

2caef530337f16a98f9ddf443502bd38a95e67ec737852f40c643b58ff4b8599
SHA512

ffab93451656838945196d54b3a1991b5c4925b6f56174c407bb9e64f80a7096279f3500262a587f39a67558d7b27ba427eaaabe6f55aebe4546a0e540c469cb
SSDEEP

1536:RnXmOIut2oXSh69Paklbm+UIyJ0cQli/kB5e5kpCv5wxmbIMrnTHYN49xxbGJqcX:RXmOIutJNm7pmcsWkB5e5kSiYMqcN+xM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a81000fce724e12ba219dd736ab7efd6_JaffaCakes118

Files

a81000fce724e12ba219dd736ab7efd6_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

y
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n
Size: 84KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

k
Size: 4KB - Virtual size: 87B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE