4005f32468388ef626222f24d388f28d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4005f32468388ef626222f24d388f28d_JaffaCakes118
Size

201KB
MD5

4005f32468388ef626222f24d388f28d
SHA1

60501ebfa2c9f5885eca0fe808a4f3578e9eada3
SHA256

82713bff84288243f10b454894769032e8956201ba6585909c75204f60fdc1e1
SHA512

50ca3eb588ca29f39fc16c1b7439c78e4ba48607bddca07977f48e8173165e1a4fda7db921aaf17f56bc7eb992448d1d0299ffe60a4ade5ee14c35384e6dbe89
SSDEEP

3072:3JZpCO6pHq7NmeXXV0f7aDB+i7Wp4Ru3cstrURtnAPipx3n7doSJ+j7NIgnlqsH:ZZiQNmeQ7aDjGcsFStVptn7tAHNI+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4005f32468388ef626222f24d388f28d_JaffaCakes118

Files

4005f32468388ef626222f24d388f28d_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ