fdbddb57466b253d57ed2658b0a6bf3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdbddb57466b253d57ed2658b0a6bf3c_JaffaCakes118
Size

603KB
MD5

fdbddb57466b253d57ed2658b0a6bf3c
SHA1

c2fa05cad0ab60260f0ed8b1594884ee8d93ddca
SHA256

8a8e83713af90276b0e954069d1dc2a54b1225fd0ca8d7860081d5a2251f70b3
SHA512

762511623bd76375bfbf1903d862e9c22f5a2971a02320a69f63ccdb64b8759d3d117019c285db23d9a6d8c98eb9ed8f62703fb6184574baea4a2cad09e5a002
SSDEEP

12288:ihhE5yn/sFxidY9LwlZofEDfXKtoRon7BMx:yjYEefEDaSR5x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdbddb57466b253d57ed2658b0a6bf3c_JaffaCakes118

Files

fdbddb57466b253d57ed2658b0a6bf3c_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 437B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ