b61f23c7357f1be289e16beb6e1028be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b61f23c7357f1be289e16beb6e1028be_JaffaCakes118
Size

80KB
MD5

b61f23c7357f1be289e16beb6e1028be
SHA1

00d01da8e803bd8dc41d4199dc8fbe2b2419369d
SHA256

03a69638d1ac8d224b0df8be0214faf7c2396a5d6619438166a750f93a0876b4
SHA512

d5cd0b59346b88c70d497d27ab8a1e1e10ea002a7a4c160147c5c82a19973260c2deba6668ae17dc3ff387031a00a7892205509a8ac64da82a53705a250fc8a0
SSDEEP

1536:phR1Bf+NuZgb5Sz3FP47XIR65010RSCBEI9c:ph/Bf1gb4zVPgXIRd10RSCBEI6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b61f23c7357f1be289e16beb6e1028be_JaffaCakes118

Files

b61f23c7357f1be289e16beb6e1028be_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ