23bffa301e79d083659bf0dcad4f511f_JaffaCakes118 | Triage

Sharing

General

Target

23bffa301e79d083659bf0dcad4f511f_JaffaCakes118
Size

1.2MB
MD5

23bffa301e79d083659bf0dcad4f511f
SHA1

aee3667555306719c6fbee5b9211f20d97d06ef1
SHA256

c8f6e28bb3c7a18b70f74e9bd809a7665f8d1f6ac1d9f847da5cd750d3baa768
SHA512

3f85126ad6d88d6b2c7771e5908ce39789ecf0bce4490809261dca203ea60c1f27157fa2f3d5563888ceac83989ea645ee304d628daf945552d31b3b29c75ad9
SSDEEP

24576:yjoCdZc7lNQl2iYA6/t7EO+JBWvxMF48SWYvFvYb+uh:yzdZ+u2j/t7uJMveYvtYP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23bffa301e79d083659bf0dcad4f511f_JaffaCakes118

Files

23bffa301e79d083659bf0dcad4f511f_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
WinHookOff
WinHookOn

Sections

Size: 15KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PECMP
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE