29a219514bbd2924fc3f08d77d13148d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29a219514bbd2924fc3f08d77d13148d_JaffaCakes118
Size

115KB
MD5

29a219514bbd2924fc3f08d77d13148d
SHA1

d25f623b1f7a8132256a1bb0922611fc5bda4817
SHA256

f6aff86c0bb20e926c1fa59433fac08711cfb1a0a2f188c49660073fdd8f9bfb
SHA512

6c0551c1187fe0c3e45c2aa3ef1b50d4fc0a12af3c3a19ccf97ff0e32688b931f8b4a5339ec8847f67b9a68397dab568602d0a25e04c549e9783fa1947d9f6f2
SSDEEP

3072:n4rTAUE7th2zhI9Ynl9xdUcXte4W//M6HByO:4oUQhnYhJM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a219514bbd2924fc3f08d77d13148d_JaffaCakes118

Files

29a219514bbd2924fc3f08d77d13148d_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

CODE
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ