da467f031184e4d4b78ba60852b43188_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da467f031184e4d4b78ba60852b43188_JaffaCakes118
Size

101KB
MD5

da467f031184e4d4b78ba60852b43188
SHA1

23e7d6ffa6b9b8862f5ba27d62241f36562cbe8f
SHA256

ce0a33bb6e1e15dcb9c9ebd080a9fe90e4e5bb872971df8586bafba22644ada2
SHA512

a9dfdbd34c3a964044a74ba098b761201f1df297698e6b4562ed292f708ad85137028f231fe4351d580f8b286a029da0cd9a5618ef250968e57cf7898dbe4a89
SSDEEP

3072:7P4P/7fioeUFPM5N1l2EE/gNUivYvEGwtnsSIlt:7APTfSUFEZEhGRtnRet

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da467f031184e4d4b78ba60852b43188_JaffaCakes118

Files

da467f031184e4d4b78ba60852b43188_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Kmlklga
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 223B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ