429332484a9e0797d414bb4e1a78e6e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

429332484a9e0797d414bb4e1a78e6e6_JaffaCakes118
Size

706KB
MD5

429332484a9e0797d414bb4e1a78e6e6
SHA1

45813fbdc08085a8428d6814c8a3306dc6e25076
SHA256

2b08870646f942abf9c0efb9cd22f69895293f189456e43e8d9ed9f956f75fdd
SHA512

9b6ce75a3f44193dad1ee2f585a7b2ce81a6f2451d3b54d28f7b57364abebf65fec8a79b613504053b8a836ab690fe0928cd5d3ed2018476e08b316f5ba3eb7b
SSDEEP

12288:5M375NQZJdNRV4EcVZSSHxYvp2exwImrKY9fMX20S:uHUJdNkEcO9sexwIGKYGX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
429332484a9e0797d414bb4e1a78e6e6_JaffaCakes118

Files

429332484a9e0797d414bb4e1a78e6e6_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 581KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ