2ae3ce79fddbae6c475d18e1a9390674_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ae3ce79fddbae6c475d18e1a9390674_JaffaCakes118
Size

797KB
MD5

2ae3ce79fddbae6c475d18e1a9390674
SHA1

d78715df545351ff584b5f5eb41f64a6d0b2ca71
SHA256

842754028fb3c9a380a37999b8b0f2f922f6d4b09e10001dd4a7b77a88229369
SHA512

c077fd93ba61588a2d7914069d6bc2ee3013f42bd989f3c1004fbf215d2aebf5022fe1339185dcea54e67d45d99a559c23908930a811140a1079b756008b141b
SSDEEP

12288:ftv1W0IFGiS5JeprW70QxcPJHRFLL+p6r0k2JC1RW8Q4HCqmoRIHXmARTRZn6oJZ:FM0PiQ85xRJ+U0Dy0DoRIHXmART76TU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae3ce79fddbae6c475d18e1a9390674_JaffaCakes118

Files

2ae3ce79fddbae6c475d18e1a9390674_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ