d107dcf37afa545201c43b1e18a583a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d107dcf37afa545201c43b1e18a583a6_JaffaCakes118
Size

49KB
MD5

d107dcf37afa545201c43b1e18a583a6
SHA1

41de1bbd4e684694497c0c368e509f598ad2ebb8
SHA256

ce7b61bd6923441e6fc5569055c0fececbe0828d68db84600a8488f29d84709d
SHA512

4790891f4ac26824260646510ff322e03e767b24bdf04d60832032b1f55aaa9b986e961f37397ab0b055d152615bf18105c8c8b64ceb94945683d0666782c156
SSDEEP

768:eSxMqQsK8QMppKbGFSiO5OpBlT37K9BiuBlHYplxJwR26046D:pxMqbK8QNsSiGOpBlT3ONcbwRaL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d107dcf37afa545201c43b1e18a583a6_JaffaCakes118

Files

d107dcf37afa545201c43b1e18a583a6_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOf
MsgHookOn

Sections

CODE
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ