d0f8e805ab1e35ff0a79653263220b8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0f8e805ab1e35ff0a79653263220b8b_JaffaCakes118
Size

31KB
MD5

d0f8e805ab1e35ff0a79653263220b8b
SHA1

dbac399de0ac4560fbe087f91f7c2da1b5ca8508
SHA256

cb6e46c17850f004ebd01ea69ee4ba62194bc9c24c7bf089071f0cc6345cfdeb
SHA512

6929000277db3d7ad8b431e10f2f699b3d6fa900daf4f780a3b34a4022a6f4fc876cce8cb7a3662ff711846b69b254093a37a0b0dda03accbbe2ba7a51d1449d
SSDEEP

768:G+ThI7Gw/rc+BB4392hBPIno/nql0ZK2xKswa1:G2h4/YrN1noyCZRj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0f8e805ab1e35ff0a79653263220b8b_JaffaCakes118

Files

d0f8e805ab1e35ff0a79653263220b8b_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ