f7e7ddce24e0f1f839586d939e13d722_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7e7ddce24e0f1f839586d939e13d722_JaffaCakes118
Size

428KB
MD5

f7e7ddce24e0f1f839586d939e13d722
SHA1

7f5dfb3498057ec772515e2d2b8564b30a5d44ce
SHA256

7fcdd5333ca27237c473245ec30680ece9e45338ebdd5449e3bafc80d3d4b214
SHA512

7a684746e468b76b28e74903a5c44e85db1b1515ff5f65e528245b1b301cd0fd2e386cff268848d62eca590b70c5f0a6a4098a344376d2c2eaf617c8b232c1c4
SSDEEP

6144:Lg8s4lUHJDjCxdxBKKl7WnHo734WG6YJurAFEkRQxeTGCPt5HUe:LWJDjIdCKYnLWG6Ys2E4usUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7e7ddce24e0f1f839586d939e13d722_JaffaCakes118

Files

f7e7ddce24e0f1f839586d939e13d722_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetDataSnapClassObject
DllRegisterServer
DllUnregisterServer
ExitAlchemy
InitAlchemy
WEP
___CPPdebugHook

Sections

CODE
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ