df0869f45e3905e20ca6e381e765be86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df0869f45e3905e20ca6e381e765be86_JaffaCakes118
Size

60KB
MD5

df0869f45e3905e20ca6e381e765be86
SHA1

a84df68d91e2a98478dc1f7e35bd0cfa7394ac83
SHA256

a4106ec2f52eafeac2dec3910daf874c2a0aad37edb0384dafa87b4bf81971f7
SHA512

f40cb730a7fc0ba3f20f1f45fd4861136dffd094ae40b313002d68cbf35a21111b77001a9e8edf5e3c503c51be02befba9f93e5e9b788df6bdeeb99d60ee469a
SSDEEP

1536:y2jfVXqQ7dem4F98GFP80eHOj3Zkv2AYZTd2f4nHahreeB+F06V3Vvjsi:y282stFCGiEjpYYZp2qH8e/F0Mwi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df0869f45e3905e20ca6e381e765be86_JaffaCakes118

Files

df0869f45e3905e20ca6e381e765be86_JaffaCakes118
.dll windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

??RnsCreateInstanceByCID@@UBEIABUnsID@@PAPAX@Z
??RnsCreateInstanceByContractID@@UBEIABUnsID@@PAPAX@Z
??RnsCreateInstanceFromFactory@@UBEIABUnsID@@PAPAX@Z
??RnsGetClassObjectByCID@@UBEIABUnsID@@PAPAX@Z
??RnsGetClassObjectByContractID@@UBEIABUnsID@@PAPAX@Z
NSGetModule

Sections

.text
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE