3de2fc634cd5179f571a4707a627506c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3de2fc634cd5179f571a4707a627506c_JaffaCakes118
Size

104KB
MD5

3de2fc634cd5179f571a4707a627506c
SHA1

526ab3e8c79a3e93a5b38ee548f22c0b6d7a426f
SHA256

19b29e05bdeca97ac59445fcda701da013f45631f02b701fb03c7b569b0dcd37
SHA512

bc466b9d5c4669e89ab40561a50695fa2a6941ac628bdc0dd65fcf83d4c3fcc500800adfdf1da4e6eb63dfb48bb88dedc62f4c6912a2994fc243a774aa719b4e
SSDEEP

1536:l369mPMHv54NahkIEDJXHkXstXEfre8qihBW30YJ33j:JKmPMxCahkxBHkXsefr5qgw0033

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de2fc634cd5179f571a4707a627506c_JaffaCakes118

Files

3de2fc634cd5179f571a4707a627506c_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ