664edeca5fc173de2cbd325db03973e7_JaffaCakes118 | Triage

Sharing

General

Target

664edeca5fc173de2cbd325db03973e7_JaffaCakes118
Size

435KB
MD5

664edeca5fc173de2cbd325db03973e7
SHA1

e179113db05e5585836c2da6910073f3d67907ec
SHA256

6dff726a7bbb2533a34738224d19b998038287b5b1ffdcdc905d3cd47a36b74e
SHA512

225997e9d0abcb9bd88a0b638179b7d9c8761efb360bd42af296b6da4ce3d90e0b581ab168ce191d79397e4bb7058620ba49951e4fcd43b06f3b2cb5b6899d08
SSDEEP

12288:CNOTOhyGDZMVwVqTqYwu7iiFQLVviHTIE0:W2aDZM/2YH7XEviH07

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
664edeca5fc173de2cbd325db03973e7_JaffaCakes118

Files

664edeca5fc173de2cbd325db03973e7_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ