3850614f2a99cca9be0e2624f8c65fb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3850614f2a99cca9be0e2624f8c65fb0_JaffaCakes118
Size

384KB
MD5

3850614f2a99cca9be0e2624f8c65fb0
SHA1

d8014664f3aa0508990549831818d978c654a2ae
SHA256

a74ab543e56b09e1acdfdb51fad66485b9a29b982c36608c9b42814de4fc5086
SHA512

59c42c1f397e7967934332525c06fd57dbaf2594b8c04285d93e0a4b94c4f43fd183c91c115f3607e93b5758b5b1315e5cd1fd15ecb223de9e925816b5aea655
SSDEEP

12288:3cEQ6dJw6fkR8H6NbsMtPq2MKct+WAnwW:MEPdJ7kR8anPS5P6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3850614f2a99cca9be0e2624f8c65fb0_JaffaCakes118

Files

3850614f2a99cca9be0e2624f8c65fb0_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ