20d999d2b86b61fc77046c93ca6e4cbe_JaffaCakes118 | Triage

Sharing

General

Target

20d999d2b86b61fc77046c93ca6e4cbe_JaffaCakes118
Size

644KB
MD5

20d999d2b86b61fc77046c93ca6e4cbe
SHA1

888131a5247b045f948a119815f1d03e4e0bc1f9
SHA256

1cc58be37dbe09c48aeb738a814d3d27b6516cf3e021cf1b910ca02f48b24602
SHA512

7c0541fd09cef82713132b0088b328c2605ad82fddfdb259619beff02cfffe7f3aa8892b969e263f282547ca4a5ac01fe98368ba881f77fbac0642d03e35a26c
SSDEEP

12288:wviGqB8vFJySCXSs9/NAolnnMATPDrSu9LRahEsUFQSR29RkJfHeIBv7pj:w6Gw8Ty3XXplnjPOu9LRahEMSRKR0feU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20d999d2b86b61fc77046c93ca6e4cbe_JaffaCakes118

Files

20d999d2b86b61fc77046c93ca6e4cbe_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ