2479a0367d553c391fdec685b965b9eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2479a0367d553c391fdec685b965b9eb_JaffaCakes118
Size

669KB
MD5

2479a0367d553c391fdec685b965b9eb
SHA1

832a5266845c210f69b5a6a7dd76fc918e85c96c
SHA256

d9bee973b48522f09e3d09f29afd5509fcf7de19a64bc7a4e8d159e53d1b06ee
SHA512

e3d355631876348f5f39bb1c816db89491fc772f65dba87be07abf2e6c58685a83e5f76794a98567c4319bba766bfb8f635ed4e542b4fd35f3b172d3d3d5cc18
SSDEEP

12288:DUu0knIXHRa4c2i72Omgtkv1+5cHgGld/X3Hxb1AHGg7/fO79s:DH0cI3gpj76rHgg/X3HxbCmgD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2479a0367d553c391fdec685b965b9eb_JaffaCakes118

Files

2479a0367d553c391fdec685b965b9eb_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ