1a1b99bcd857e45cd8d792fd399d8307_JaffaCakes118 | Triage

Sharing

General

Target

1a1b99bcd857e45cd8d792fd399d8307_JaffaCakes118
Size

592KB
MD5

1a1b99bcd857e45cd8d792fd399d8307
SHA1

d16d4926ff0c2e97fe7c2e1a0d52a50f312f00e8
SHA256

0b8323d031cbf1a64f7a70496cdfe12850972c0a029e5fae9635e08ef3cc0f7d
SHA512

9ae26a57b99ea9fecb507fbc9e0ceac818d19e71345089717c93ca9b8eea522cf86685520908d9f3ff7ef82720f9fc414a76d59de0125fb1ead059ab634c3696
SSDEEP

12288:J3hE5/i5uCvbZWliBbuGZoREDfXKtoeCn7BZPzCV:NWlKbuGeREDaS7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a1b99bcd857e45cd8d792fd399d8307_JaffaCakes118

Files

1a1b99bcd857e45cd8d792fd399d8307_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 437B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ