f18eca2bc9c3df81c3dd85ef44f43417_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f18eca2bc9c3df81c3dd85ef44f43417_JaffaCakes118
Size

640KB
MD5

f18eca2bc9c3df81c3dd85ef44f43417
SHA1

3f28e44534bf380a726ec15d9ca7f00584182c01
SHA256

d548941884f52509f8c0fa8333f867c09850488f258ca6cac86c5a7ef6855d9e
SHA512

8784a26ef22923e482c4cecc49c6ff2c7fa08df70dbaeebfab2f451c7c33e1a6bcac4d02dd00c92a1698dfc85f9a16075c18e08e96a0eb12c851765649600817
SSDEEP

12288:3kdtYzsZDM2fjYiV/UzxoyS7nUmsn7lhppzh+Z2tePm:0dGzs/0kwolUf7l9h+ZA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f18eca2bc9c3df81c3dd85ef44f43417_JaffaCakes118

Files

f18eca2bc9c3df81c3dd85ef44f43417_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ