3e361ca8b6ded6d7bc56695b0746872a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e361ca8b6ded6d7bc56695b0746872a_JaffaCakes118
Size

193KB
MD5

3e361ca8b6ded6d7bc56695b0746872a
SHA1

b2f756889ac592c053263e1d97dd13cad9b6f707
SHA256

c4c744d77ac4d2356f59f4ee43fde2df2e4ab865ea1e0fb153bbf1b05c1c4428
SHA512

7bc9c0b5048ebcecd5906b8e2b14e51607d0ac0b93735a8020ad950ac6b4c73fe6a2c2b6aceaac6d15cdadd5848bf5d99951425ef7f53c0498d0aa9167b85278
SSDEEP

3072:Z9XBKQj+gUyd3efsFsArsjeQ+3bdGNtak/vDVGX216H9+Snh:HI4+gUyUfjQ0NZLVDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e361ca8b6ded6d7bc56695b0746872a_JaffaCakes118

Files

3e361ca8b6ded6d7bc56695b0746872a_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ