5d7a47d26073519d04634fd22e3ccd71_JaffaCakes118 | Triage

Sharing

General

Target

5d7a47d26073519d04634fd22e3ccd71_JaffaCakes118
Size

639KB
MD5

5d7a47d26073519d04634fd22e3ccd71
SHA1

6bac5682c9559c5ad30bdeb23e027e230761773c
SHA256

6df6967b1edf6ab3ddd924c313104e38f7f4aa59e6c2654d7de52102bb02d9e6
SHA512

7c096c534fe3c421884a0b3466a7fa8af9823e1d461f4ebb1c6e5ec6abece9ee47b1ed083adfa8917e3dc0f056dc57cedafb32f344e7724808499bb3f8bd9bd0
SSDEEP

12288:HlhE5ibm+aGjzfe3TwHZo1EDfXKtoG/2H7BW:H1eDwHe1EDaSSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d7a47d26073519d04634fd22e3ccd71_JaffaCakes118

Files

5d7a47d26073519d04634fd22e3ccd71_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 541B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ