b9a3e8e6b4c4bb2aeb02b68dfc0f2d0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9a3e8e6b4c4bb2aeb02b68dfc0f2d0f_JaffaCakes118
Size

565KB
MD5

b9a3e8e6b4c4bb2aeb02b68dfc0f2d0f
SHA1

a0cecbc667b24ebf3b71aa51bbba808290e7a3e7
SHA256

5505ec7f3a9a9e81e40917825fa98d925487b5a73007c42c903ffffee758746c
SHA512

21fd95a1393498246a938ada2c71cb3d6ea37a6efef0e852973bea24928eff6bc0f1279d2f1047fa776972d3561f78dcdc649fa282682899e75f459da59af699
SSDEEP

12288:CyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGXZZKh199VBwQ:c1fqZCHwIr00taCiHprZZCf9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a3e8e6b4c4bb2aeb02b68dfc0f2d0f_JaffaCakes118

Files

b9a3e8e6b4c4bb2aeb02b68dfc0f2d0f_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ