fa27ce99cc5d79ddfb48b98c02f6d256_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa27ce99cc5d79ddfb48b98c02f6d256_JaffaCakes118
Size

31KB
MD5

fa27ce99cc5d79ddfb48b98c02f6d256
SHA1

64124050d3558d045e3edc4795eaf19d73b8ed07
SHA256

fa40a41a24004a9e49f5358643f4ecfeac7022577e7073d1d7448e6589476826
SHA512

a6ac30dd7e399e7be5f60d413d6c52f17adb3ab1e9e01f477bc0dec5cc3a378b76db744e23a2e62d29314563ee4332cb5025891650922757ad6fc7c08c216e97
SSDEEP

384:RNNe06t9hchzZnljOzYP5liHrK5wxmCo2/MX98bBHQFXQ8WIH2VfHD:FeP9hE/3irK5Mm4a49QFnWw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa27ce99cc5d79ddfb48b98c02f6d256_JaffaCakes118

Files

fa27ce99cc5d79ddfb48b98c02f6d256_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ