5bd8690fedd9177831d498a039110a61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bd8690fedd9177831d498a039110a61_JaffaCakes118
Size

681KB
MD5

5bd8690fedd9177831d498a039110a61
SHA1

9e8d4899b5522967aa073edb7d82b2eac0914717
SHA256

47e45f4f3545aaff8c101e80562441c9c38d8860cd07e5b0f87d39362c5068c1
SHA512

e03b57f7344d89ffb758824e10f3d418453b6241d901f88ffa9026ad82c945519c67e2bd1bf249611ad7ad1905b06b6726c44e10f31e0d0c9e32d68a0f957350
SSDEEP

12288:Bd8XIy8eDudnnJHjxF/Tt0HARqd1hPHJcRG8z/T6Z7J3Ixr5YMOFKD/fO79s:BuYyRD0JHjBHqVPHJcRG8z/WVJ3Yr6Mn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bd8690fedd9177831d498a039110a61_JaffaCakes118

Files

5bd8690fedd9177831d498a039110a61_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 519KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ