45563821f3c5b74c367da9f6a4996e98_JaffaCakes118 | Triage

Sharing

General

Target

45563821f3c5b74c367da9f6a4996e98_JaffaCakes118
Size

902KB
MD5

45563821f3c5b74c367da9f6a4996e98
SHA1

db251bdf57603c2a1abca3ac9667551dc3509579
SHA256

16a1c23d6ef779837f4d407490047a89c5b5cd9c2f360ce939504107215dfdd3
SHA512

ce8e2560bcbb598335ff33e7d4742cbb89668cc55507f09b197d2462ad09ed8a5b7b66c7009351f5a859915edf5c4ab52b9f347ab775cf2dd55570ba06f30138
SSDEEP

12288:L+MPTdwkAkpIuDScigwk4e/geGpPV5UCKDdHmcju9YpWKJJtFzwVUSJN80XF9iJc:aMrdwkAkzFii/2Ixk3KJJt9wJJ/agsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45563821f3c5b74c367da9f6a4996e98_JaffaCakes118

Files

45563821f3c5b74c367da9f6a4996e98_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ