43fcc93c447829449dc3bba20c6b07b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43fcc93c447829449dc3bba20c6b07b7_JaffaCakes118
Size

120KB
MD5

43fcc93c447829449dc3bba20c6b07b7
SHA1

5089e5f8f4ed0a7cd30094dd42013cc530c03e6c
SHA256

de80fdb2edff8c59f6d7d31a9c382505cbdae5b58b3840b89f7cc1facc8cbea7
SHA512

d2ed852390c11c23a93d3604d2ce5adf73dd77624e6e5ae1d2e39e9c895806399e5aa389cbdcf5691e6a01a2fa7e1363b91893e261bf9fa5dacff962b5ce3f79
SSDEEP

3072:fJJzd1wPOR/x6Wpe6vp2Zmignewq7y+p1XuuOGoUgZ:fJBnwPOR/UmlA07newAdC/Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43fcc93c447829449dc3bba20c6b07b7_JaffaCakes118

Files

43fcc93c447829449dc3bba20c6b07b7_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ