fe80844754e6c64a9b92a79a58cb23b9_JaffaCakes118 | Triage

Sharing

General

Target

fe80844754e6c64a9b92a79a58cb23b9_JaffaCakes118
Size

251KB
MD5

fe80844754e6c64a9b92a79a58cb23b9
SHA1

9ccf8453050854f6c42b0146fbf877d7cf1ed409
SHA256

826bb965e02e15fcb47a17d04154d1fe17625dc7701d530ffb83662f380ba597
SHA512

125775f0488fd782f2ac48ae4fd4b07f178f67fcbd2d2fbe62f65d904233b00ae2223d8ee94ec2cc8d7981b2b77abbfd8fb9d5a70102633c2039890668fd2938
SSDEEP

6144:QPNVkqT+65GSIntmXQ9przoxGTrapInAArLGB63LIC8zmtL:QFeivGSInsXVmriB63E0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe80844754e6c64a9b92a79a58cb23b9_JaffaCakes118

Files

fe80844754e6c64a9b92a79a58cb23b9_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OE5SimpleCreate

Sections

CODE
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ