5e77810ca0ae488c4647837b9216fef0_JaffaCakes118 | Triage

Sharing

General

Target

5e77810ca0ae488c4647837b9216fef0_JaffaCakes118
Size

28KB
MD5

5e77810ca0ae488c4647837b9216fef0
SHA1

9f6ec67f9f55de56b9c829a1d7cb93487920d0b5
SHA256

3ef34877641921a798e9012cda8cf1767ea36ff4f619eecec384a090b70d8925
SHA512

6ce659494979cc5ceb219e195fd8947bf9282f9e747e6b1b1603fd9c66e7d99464834a400686ff46d360b203327a3a32a4ece2b660ef6d91745fbad953a6f428
SSDEEP

384:qLAHxUSEqujwdKnGQmrjtlpKQfxWaOPJDbJI6f4O1s56TLwqmJ82t/gAzGAHA5em:nKSEquMd0GQ835ODbJmsoJrNGRe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e77810ca0ae488c4647837b9216fef0_JaffaCakes118

Files

5e77810ca0ae488c4647837b9216fef0_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ