123d5c5e8bf4596e4defccc94a49456f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

123d5c5e8bf4596e4defccc94a49456f_JaffaCakes118
Size

231KB
MD5

123d5c5e8bf4596e4defccc94a49456f
SHA1

6a716cb7659facf9c7689dfbec0d472f20b550b7
SHA256

a155fdf2b2a6a3f80bb705a8d88d4076caee97ced9e0ccb68b67e5122dfe3989
SHA512

a9c585063a58d53b9f1bbb07dbb7b30d2b91891c0bfa61c3b9c643b9a757903684e51efe6b5708db2167315cdeda823d66ad6eab19114acc7083d7047d10d89b
SSDEEP

6144:x7J/6ynVLZjqhBOmwf1AW7G+Q3OWnRAK:ZJ/6ynVQhQmyAW7G+Q3OoCK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
123d5c5e8bf4596e4defccc94a49456f_JaffaCakes118

Files

123d5c5e8bf4596e4defccc94a49456f_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
DllVersion
WinLogoff
WinLogon
WinShutdown

Sections

EPa
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EPb
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EPd
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE