df6f710f6b4299bb4718a0fc540ec1e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df6f710f6b4299bb4718a0fc540ec1e9_JaffaCakes118
Size

76KB
MD5

df6f710f6b4299bb4718a0fc540ec1e9
SHA1

1f9d19ea651e7b52cc3e0f95e2855f7da509e976
SHA256

327aa9b8a0057f03153eb8be4663aaf8b05aeb2dc4fb552193577b0d708ba3de
SHA512

824a676fe53d95980ae49e297fb519c56726e8e3f87e75671f21faa8fb12f990e3579a6ce804f39d62296e08e2a60bf3103a0ea8994a9e64c27aae1d1e9fdf18
SSDEEP

1536:UvUVGwHCcWCX7W/6bIhgQFRq6X2IJMTnNII1Nemq8:oUPLs6bS9UqJMTnNIwN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df6f710f6b4299bb4718a0fc540ec1e9_JaffaCakes118

Files

df6f710f6b4299bb4718a0fc540ec1e9_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ