b7fce56b0fc1a4dc21c0f7702f137686_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7fce56b0fc1a4dc21c0f7702f137686_JaffaCakes118
Size

97KB
MD5

b7fce56b0fc1a4dc21c0f7702f137686
SHA1

5f3b2d62eb7ab4ff2b360d0b8f165e908e40b554
SHA256

6db1530694c9897085dbaa543e04e5e87aa2129152fa50566284b471c999f32a
SHA512

d464257f07b0c2a92434f778f4267dbe6b93986d440829de44713a6bc2ad27e58a79c4bd8532154cbe7a1cb95e1c72a6613b4ed1cc59e2015647b6b3a8b80bf7
SSDEEP

1536:NQspD5TNK5fFJvkwf6ZNjGWMhsx5FwYkhaKRPgAEHUT0BDSPStlYJ3F5DNcrMOlx:/BXLVMhsx5FwYo5PgAp2DMelYBFeME

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7fce56b0fc1a4dc21c0f7702f137686_JaffaCakes118

Files

b7fce56b0fc1a4dc21c0f7702f137686_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

529eec90942b849c7b88958663d3d3ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
SetLastError

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ