5a009daae12269025fc2c2d502d6adab_JaffaCakes118 | Triage

Sharing

General

Target

5a009daae12269025fc2c2d502d6adab_JaffaCakes118
Size

605KB
MD5

5a009daae12269025fc2c2d502d6adab
SHA1

97556d06bbbc74a4f020fa697f23e568c8dbe074
SHA256

1b26a00ece2fd30be61f4eae066518393aa9d0c34d7c61fd3d732b5ba940ad5c
SHA512

a81968fc90ce27b67c694e154f4c15390074916afb36995bd0bc994954d1a80fc73c47cf297f7dbcc5fe105c97f760e0fa5d0eeb257cadce0be3a3b862a9692d
SSDEEP

12288:0Uu0knIXHRa4c2i72Omgtkv1+5cHgGld/XFgrVxW1xfJgd:0H0cI3gpj76rHgg/XFgrVxYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a009daae12269025fc2c2d502d6adab_JaffaCakes118

Files

5a009daae12269025fc2c2d502d6adab_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 509KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ