cf37da0a974cf1a294a681a86d35dfaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf37da0a974cf1a294a681a86d35dfaa_JaffaCakes118
Size

1003KB
MD5

cf37da0a974cf1a294a681a86d35dfaa
SHA1

3eacc76f9ca962e24a74f82e946557fe01c67a88
SHA256

68db4dc9fc21d863c3e559a182c51a1138a6834c092d551f738109f0c017c034
SHA512

c8f5b75212660b73ef4db0edfb6aeb0be99a74f4d8519d208b34726b10116732074b062d5652a47be4f67bdfa3f1c80422b7ab3600fcd5fdd18af9cf3e711541
SSDEEP

24576:3BOV4sQp1CM6QhN5OOB3g8HGIpzP2JES3Kbd:3KynNN5O13IFPn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf37da0a974cf1a294a681a86d35dfaa_JaffaCakes118

Files

cf37da0a974cf1a294a681a86d35dfaa_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ