2c18d3d3c644a72a4f04d1d96b41c75a_JaffaCakes118 | Triage

Sharing

General

Target

2c18d3d3c644a72a4f04d1d96b41c75a_JaffaCakes118
Size

608KB
MD5

2c18d3d3c644a72a4f04d1d96b41c75a
SHA1

74a883edb7ffba264640d2ce22ccc09c42cccef3
SHA256

f5a577062f63e19e9376785c0b598bbe07811fafdab8b09b67e97d1d81f63ab3
SHA512

107bc3d9083c24ae59a7669fd609cced084e11950c48b10357aa90bd86f9a67a5ef4e89a04ec8c5d906386e2d51b349d6bf177feefc8f9ce2f4809ec3ad62c85
SSDEEP

12288:xeW+hE5wEZKW4WZqhWZouEDfXKtoK/5n7BM:MQq4euEDaSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c18d3d3c644a72a4f04d1d96b41c75a_JaffaCakes118

Files

2c18d3d3c644a72a4f04d1d96b41c75a_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 437B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ