4dd3c68dede3796b55d40526e7b47c83_JaffaCakes118 | Triage

Sharing

General

Target

4dd3c68dede3796b55d40526e7b47c83_JaffaCakes118
Size

25KB
MD5

4dd3c68dede3796b55d40526e7b47c83
SHA1

bd30193d559bf670ad8a8cbc7f0329cbc0f3b1ab
SHA256

7d9506af394bac59f530d0b0693902636c19b171c4d75fa457fe5fbdb259983b
SHA512

3b7b73ca0da85f4837547679cac064319df313d52584f9af89aede25501a606876e654481cb4321e9a7ba4a4ab29cd7f0d8e4aab072811b0dd6bc797f6645b6a
SSDEEP

384:97dxz0CuAkqd+1TkQattckmCLPlpzLA7GRxvAz5rWQNcG:9gCuVqdSAQWPmCLnBxI5rWhG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dd3c68dede3796b55d40526e7b47c83_JaffaCakes118

Files

4dd3c68dede3796b55d40526e7b47c83_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ