320cbe5cdc3170ae105e0434d5048fc7_JaffaCakes118 | Triage

Sharing

General

Target

320cbe5cdc3170ae105e0434d5048fc7_JaffaCakes118
Size

709KB
MD5

320cbe5cdc3170ae105e0434d5048fc7
SHA1

fa8120ff9807ec05013debfeaf2fa6ad030941f2
SHA256

49006658fbd254580cee741b4563a4d894e0b5ed0c8d15be998a935735f54231
SHA512

02116cde982bac33a78b6c1e5fcd8f7f7b9b869ed67f0c57f042b2bdb013e53f306c9329c80edc3d34ed5a7b5f98cb3e66d25344cd386ea1cd1e99451a0a9052
SSDEEP

12288:I7Qu2fTS8P0ZL2Eg8wUVQyFk0Z8XjT5QG95hIVNTdPis1lU:IkueTfK2302oks8fjVITT0aU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
320cbe5cdc3170ae105e0434d5048fc7_JaffaCakes118

Files

320cbe5cdc3170ae105e0434d5048fc7_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 493KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ