fc65b568dc05e4e8bd8cac0c2981b319_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc65b568dc05e4e8bd8cac0c2981b319_JaffaCakes118
Size

84KB
MD5

fc65b568dc05e4e8bd8cac0c2981b319
SHA1

f858293f4d34afe4be7759ce72b38915bd162a3d
SHA256

b316333f4dbb1988a9245196abafd5527e41e3f15514c6fe8473ca9f9e27dc47
SHA512

fd5cd13004009d460b4082084028010692f042267acea09bea15c3a8435eb9c5424cfb333e8499c6070ca2f30fc2859fc26f65ff343227f2f1e767c2e53c1ebb
SSDEEP

1536:gzZGy/ylVP0P6QZ650uHIOzpMuASZKN8FpKTdJkuRE5i:2Gy2rF5n3vZpduRci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc65b568dc05e4e8bd8cac0c2981b319_JaffaCakes118

Files

fc65b568dc05e4e8bd8cac0c2981b319_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

kefd
Size: 3KB - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lkxesygk
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE