499d97a5538730d34720196c4715d1b0_JaffaCakes118 | Triage

Sharing

General

Target

499d97a5538730d34720196c4715d1b0_JaffaCakes118
Size

607KB
MD5

499d97a5538730d34720196c4715d1b0
SHA1

41fdc433ba32e479dccf7a44902818d17b3a3376
SHA256

40b8ef73bf3d30926b542835e17e8eab8cd1ba0833c2496c7bf3a9ae9441d9a2
SHA512

8ce68aa4fa9e1784257ed0b957081d252f4c61f3ef1bd396b98d5a86c8569bb4477e92e61e1d0b954b60676ae6e4d61e36db58e0dfe531fd209102a1c2e5a8e0
SSDEEP

12288:hdUXYC8MJH4nrGPP6oH/srAvNObzyhLPH2aylsfV/zUz:hmoCHJnnDHJvszyh6DYq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
499d97a5538730d34720196c4715d1b0_JaffaCakes118

Files

499d97a5538730d34720196c4715d1b0_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 519KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ