354a5bdccc5c17435bbc2abd1e7d79f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

354a5bdccc5c17435bbc2abd1e7d79f5_JaffaCakes118
Size

639KB
MD5

354a5bdccc5c17435bbc2abd1e7d79f5
SHA1

6d547c397fe6aab6f461ed87029aced1f18e6655
SHA256

55b6c793c83425aea046c1393a41f5b931b4cadd98eb900d43301beeeffda7aa
SHA512

1545b7daa86fdd1be0a41eeda4d65644a183297cda884ddb6d810c3a9cb2e83ff96035ee3c6cbd0f127a6b0b5e4a12df1393c2793e1adfc241a52bb8ab6ffb8f
SSDEEP

12288:ZehE5COyMJ5lpKnOgrwKSadLZoyEDfXKtoK9kn7BsM2AdoZWoC3ZmNm:ZQxwSeyEDaSwNM2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
354a5bdccc5c17435bbc2abd1e7d79f5_JaffaCakes118

Files

354a5bdccc5c17435bbc2abd1e7d79f5_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 453B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 203B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ