a9dbe5e5ab98a99ada3aac68bbf0ba15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9dbe5e5ab98a99ada3aac68bbf0ba15_JaffaCakes118
Size

44KB
MD5

a9dbe5e5ab98a99ada3aac68bbf0ba15
SHA1

3d1c05389685b3f83fdea22ccecdcce2d6ee8a5e
SHA256

9053f6b96bddc92c0197bbfb62144ec99068ac70998620ccd342390319bb617f
SHA512

076883d312377f5d08457baf46439e04665c11724d787518ca995724e625ba00e9c14ebaa81b7f7710fc006a8c8e87035fc99616f6b175efa7e1bdc0ce8725a3
SSDEEP

768:bOYFLJJ3wA6cGm1FGtYZMuZ86I6cAau6lU0cdET7Zf:bRw6AeMuZ26cSdEnp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9dbe5e5ab98a99ada3aac68bbf0ba15_JaffaCakes118

Files

a9dbe5e5ab98a99ada3aac68bbf0ba15_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ