37cd6ee3985ff196f9009b80859c025a_JaffaCakes118 | Triage

Sharing

General

Target

37cd6ee3985ff196f9009b80859c025a_JaffaCakes118
Size

629KB
MD5

37cd6ee3985ff196f9009b80859c025a
SHA1

799a09e8d431405397974487e3898b48f85122fd
SHA256

789ed5ce7e66aa23c06c7ae0fd09d7252ee79e9980f7738db65a6737f2cb61a4
SHA512

71f3df418a533309e67a19257015d768559c6fd1e922cca79424b276bfa301249cc6186fbf1bdd3f15d8ca451546d3887e592381e36fe450208d0f1ae0bd27e9
SSDEEP

6144:B+nZ4U3rBKr/TNkcNHCuhbon90EDfXFwtoL:BQZ4U7YLacZjZo6EDfXKto

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37cd6ee3985ff196f9009b80859c025a_JaffaCakes118

Files

37cd6ee3985ff196f9009b80859c025a_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 357B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ