bf282d97527313c0bc412287db01c8ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf282d97527313c0bc412287db01c8ed_JaffaCakes118
Size

431KB
MD5

bf282d97527313c0bc412287db01c8ed
SHA1

6a2189c4cc6ff6a9878307e0c2b9a3423f97c1c4
SHA256

cf48e2085a4d95df8a4009e501c6a886fce6e6219f9fa21662b9b6dfcae28737
SHA512

a8c023263d5d0e8ab5772ca758bac2b742f95a5ed12430cb222c47be030d85abc7eb35f7ba250853c47106d1f6bd0e3856073786bed2e3cef7867e0e99af7741
SSDEEP

12288:8qEFiqK64qZi53IgtUkM4DQFu/U3buRKlemZ9DnGAeFfS7L0K:Xgi44oGZ6Uq30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf282d97527313c0bc412287db01c8ed_JaffaCakes118

Files

bf282d97527313c0bc412287db01c8ed_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ