eb2edbf0ca696165a634cd1385177943_JaffaCakes118 | Triage

Sharing

General

Target

eb2edbf0ca696165a634cd1385177943_JaffaCakes118
Size

84KB
MD5

eb2edbf0ca696165a634cd1385177943
SHA1

c2c309884436628605a066b63055140a98e98617
SHA256

3ce20bc482bc8237f3367d031fb741d71d40a1387d1b0d4aa0f20db81cf3c580
SHA512

80dfa200afe90048f44c73862f24c2e7f240d631421e081fd961ea5c15c69799b66610acf0005290c4a00c5b890c7005dfdc3c43e368164874a9c990bbec52ed
SSDEEP

1536:3wLF+QfvcYsqPLO52XHMUEjmA/SBk1wEvNGk8UEj:3wh+Yb9LLMU1A/SBkucf8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb2edbf0ca696165a634cd1385177943_JaffaCakes118

Files

eb2edbf0ca696165a634cd1385177943_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1KB - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE