4a451c9f06853b63482fd992116ed8bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a451c9f06853b63482fd992116ed8bb_JaffaCakes118
Size

619KB
MD5

4a451c9f06853b63482fd992116ed8bb
SHA1

85fc98bdc4131ff754c28e6c603c39d189f7ff84
SHA256

25bd2380700c06b78a5160ff399f8ba94ae316885507fa152da3782722181b92
SHA512

e39e5e3957ae9d75e27fa9f2e59a3c8436e1907e596f091e720a35da1c33132ae0cfa65c52fb9c3bacd73cbb4e9fde77c88e1f9d1b2999ad520efa3f91e24a1e
SSDEEP

12288:3lx5xyCNPaf/k1dFgHcFkGpDVqtClWamKZ8Mt1AG6Y:VTc6M/kjFl6C0ClWaxJ56

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a451c9f06853b63482fd992116ed8bb_JaffaCakes118

Files

4a451c9f06853b63482fd992116ed8bb_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

CODE
Size: 531KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ