2683ea577dc2971315432d90b870ae83_JaffaCakes118 | Triage

Sharing

General

Target

2683ea577dc2971315432d90b870ae83_JaffaCakes118
Size

80KB
MD5

2683ea577dc2971315432d90b870ae83
SHA1

f6992dd8f7e275fcc20e2dd32fcb38db6888ef56
SHA256

4c9039e38b30fdb9b232eb3b69726469a90da133c18331974d91aa9cfa281722
SHA512

65757858cf15928907ef9a895d702e4aaa5e6c0c25887339a6c211eef4d5bdfd542adcaee5d340f73ff3f700b38551f2089b1af6008867a2b634b0d737cb171a
SSDEEP

1536:IgIGK5mDWsmLQt9yXahWSqvQAFuYU483qhMnvZNT8:IVGBWs9wIiuY8ahMnRNT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2683ea577dc2971315432d90b870ae83_JaffaCakes118

Files

2683ea577dc2971315432d90b870ae83_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ