27596d36cc26d2ecc06157b8bb982e7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27596d36cc26d2ecc06157b8bb982e7a_JaffaCakes118
Size

32KB
MD5

27596d36cc26d2ecc06157b8bb982e7a
SHA1

097e4c2f977fe3956993917795844e08ed372474
SHA256

0dd336a85418280205a343202f70e3cbd4856a6f1c7eabed1e9f67e72eaab747
SHA512

53bc86a1a23dcf5ff4121a4d72e2de0e4484efe3cd03c185eb83ad9b1d03a85793a785311957ab01dab5c7dacb71379bf63b3d9fbc29f02b8f1a41f407d1586e
SSDEEP

768:D+ThI7Gq+2PaU5KAAY/fTc0FSSxYswLk:D2hp2Px5KAPHZFRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27596d36cc26d2ecc06157b8bb982e7a_JaffaCakes118

Files

27596d36cc26d2ecc06157b8bb982e7a_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ