2bce4ef02133d0d755ad509fcb11fdc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bce4ef02133d0d755ad509fcb11fdc5_JaffaCakes118
Size

651KB
MD5

2bce4ef02133d0d755ad509fcb11fdc5
SHA1

d05d53f207614398d5fb15d353ee5b0dd46ca1bc
SHA256

410c5f3cabd61fc1f6252bf43795bc3f840a93d11abc6eeb42ce807a8fc822ef
SHA512

b6138ac0b530b9f34a1ce04a00baf1e09f204a3c1c45bcab3932e14d0a609a1a03e0c28388660e2bd3665d18015c77fc5e5d184e1e54152ec7867d160ade1d17
SSDEEP

12288:itv0EYFWSCJZu51oBcvZHR1LL+Z6biLUWJy1BWcQLHCqmoRIuSuukjm5e6oiew:WMEvSwsZBR5+UiLTiEqoRIuSPk96c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bce4ef02133d0d755ad509fcb11fdc5_JaffaCakes118

Files

2bce4ef02133d0d755ad509fcb11fdc5_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ