fe2c6109197088f91480330eca7bd925_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe2c6109197088f91480330eca7bd925_JaffaCakes118
Size

41KB
MD5

fe2c6109197088f91480330eca7bd925
SHA1

bd9b5a2a8f1675a1ba947e252fa7e548532bcad8
SHA256

6927a0d295480a561a9a7000281359537881e49370cc783bc8f1e8084077ea14
SHA512

09545a6310997ead7460b0f9f7a93ad2533a15c7c94e3e4bdd9a131703e9446e614f7f4994dbb541ccdd2a65ddda5b2808c4330d155d2a389cdd0381878c4904
SSDEEP

768:4Vl/JIBYesnumFey5ExSfXxB/owkBrBU0MJy9bOg2i:4Vlh1feXwXVUrydJy9bq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe2c6109197088f91480330eca7bd925_JaffaCakes118

Files

fe2c6109197088f91480330eca7bd925_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer
ServiceHandler
ServiceMain

Sections

.code
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flat
Size: 1024B - Virtual size: 973B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ