48a87b768277eabc6fbe770a1fcb0d25_JaffaCakes118 | Triage

Sharing

General

Target

48a87b768277eabc6fbe770a1fcb0d25_JaffaCakes118
Size

40KB
MD5

48a87b768277eabc6fbe770a1fcb0d25
SHA1

3f6d7665653618560a6dba8ecbb96868d26936e1
SHA256

3ddade7db920c1253aa23e8a6bcd59e2bda84d6519e7d5be657e1b715b18ef9f
SHA512

e7bf4f963ce8c94a843014b98f041a4cfbc5534ac45e5f360b64506c78a6db795505c2f269554ecb27da15bf1ee47939ff0449be8165938e358cb85c191c0419
SSDEEP

384:Td7s9P9Qddrx4ReEdApZvYPJi4iOnCalT9DbODiduIHzan9i:Jge/rqcEmZvMJiTOnCalTtODiduIeM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48a87b768277eabc6fbe770a1fcb0d25_JaffaCakes118

Files

48a87b768277eabc6fbe770a1fcb0d25_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ