5ad67cf0eefdb5a54ef7bc0e0e038b6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ad67cf0eefdb5a54ef7bc0e0e038b6e_JaffaCakes118
Size

674KB
MD5

5ad67cf0eefdb5a54ef7bc0e0e038b6e
SHA1

c9e6dcc13892dd9d5a2df1186989a447debdb8f8
SHA256

d8827190a6deaf455d153a83898c8ab0d55cbad2040bd0c1bdf0a622353b2676
SHA512

9a97365c3311e637ad7f889d53e8a9410c53c6410abb69a176d3d1335f7df583115a58c7138c815f4e606cac48dfa77019e8a43749abf92fafb04d1f7888cf80
SSDEEP

12288:kwO0UFmRHRdZ8VyQ+ONEbTB39tCN24Wl9/XTQwZPw/gF5j9q2FOgd2tePm:kT0CmtvOEQ3IE24Q/XTQwZggzj9q2Egf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ad67cf0eefdb5a54ef7bc0e0e038b6e_JaffaCakes118

Files

5ad67cf0eefdb5a54ef7bc0e0e038b6e_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ