005b1d2c3c9ee19c3e21b6336b3e95a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

005b1d2c3c9ee19c3e21b6336b3e95a8_JaffaCakes118
Size

44KB
MD5

005b1d2c3c9ee19c3e21b6336b3e95a8
SHA1

54a7c56e86d1c524d25fe3abd6c1d5f917510bc8
SHA256

e38b0bc12d7d29f820d10f8c7f637b3c42bb30b645c9d8f9f9f179d14c1606dd
SHA512

c63409d81c4ade19ce6b3402959ffd18f0b693ae27305ded38d422b2c9c56166af071d00b18e56c243ed53f855347998a232cfb87019b14c6ff88d8904dd8b47
SSDEEP

768:qCSqWQ1geCiGjLbjCnol7IiO5OpBl5Y3vXZJN/O2rSHLQTPiGxbH09ee:NSqWQGPjLbjCnoiiGOpBl2fVO2uE5gce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
005b1d2c3c9ee19c3e21b6336b3e95a8_JaffaCakes118

Files

005b1d2c3c9ee19c3e21b6336b3e95a8_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif

Sections

CODE
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ