f82cff1f8a3de8a8f891d5ac74bf2ff7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f82cff1f8a3de8a8f891d5ac74bf2ff7_JaffaCakes118
Size

480KB
MD5

f82cff1f8a3de8a8f891d5ac74bf2ff7
SHA1

25cf77395ad767f7a960871b45ced08c3815bc00
SHA256

994d02364001319f2a3fd9318a2f760c79d7dcfddb177940e22cb60765992094
SHA512

3b40046214798f839331a823df55642112cd9a359fbd9ac3ba954175ec7bc4bb577448741ad6f119375dc336128901de1c60927e27aa0710c751896217bed4c3
SSDEEP

12288:vVJNnVy735dQvVxWMvzNlvbbr0oJC3gwN:N7ydQvV8OvvbbLC3g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f82cff1f8a3de8a8f891d5ac74bf2ff7_JaffaCakes118

Files

f82cff1f8a3de8a8f891d5ac74bf2ff7_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ