15399b74b7f27ef357d877fdefc01e00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15399b74b7f27ef357d877fdefc01e00_JaffaCakes118
Size

39KB
MD5

15399b74b7f27ef357d877fdefc01e00
SHA1

9a14ec1ca8098c908db08722393c81ae6496f5cc
SHA256

26836b541f698903d57e0d2a9bf68d9aeacd380a1324f5b8e41af5cefa1c36d2
SHA512

b14f456c5c38e9fbe315a84a3f1f3abfee466294b5495716de2ba2045819cb5e3bbd01122375f0fc4a100868e38f0d4dda7af6877e7bc531ad4f06e3602f4982
SSDEEP

768:a88h1zM3gwErQUNjTz6joQTdpIPl1r8sKw:a/rBrQUNjHKokA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15399b74b7f27ef357d877fdefc01e00_JaffaCakes118

Files

15399b74b7f27ef357d877fdefc01e00_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ