dfdc7a71973339386324ed2196f7d3cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfdc7a71973339386324ed2196f7d3cf_JaffaCakes118
Size

788KB
MD5

dfdc7a71973339386324ed2196f7d3cf
SHA1

576cf90c53f3995cfa2e8ba6ce068bf4330858fb
SHA256

9f0f89ac2153a979221d1cb827569cbcb043f129dbe99aca48427848b531c1e2
SHA512

c95385d70fe1adce1e3e8790c788ebfb2106dd65b37bd5a84139dd276a1111bd75d2fa158a728237f209be00c578e7421d72083d6c277f3139e3514ff993de7c
SSDEEP

12288:mLia7VR3j9d5rnsEc5phf3Srg31zeeLHCO2256FnZAdJkMw:mLZCEchfNfSaJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfdc7a71973339386324ed2196f7d3cf_JaffaCakes118

Files

dfdc7a71973339386324ed2196f7d3cf_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 732KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ