664387623b736f616f49e6f544a9c371_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

664387623b736f616f49e6f544a9c371_JaffaCakes118
Size

770KB
MD5

664387623b736f616f49e6f544a9c371
SHA1

040370704e68e5925862622a0be9c877c4f66910
SHA256

1baaf74fc36ad992d914658ec746862f0acd528933380345928db3ae268895db
SHA512

b94ded219c26da92554323d393490cf10fd9ce0f2dd9e2ccf7f0d533a914741e37830388e7becf473decbeb5b64cf901310b17f2229b568b10150a7cc08ea99b
SSDEEP

12288:hFVfKITEN91Opm2PsqyFpIsnXGShEDd2pjvJ9grK97s6rh8WSiyuv:BCOcOpmKsqKdXGFIoG7s6VNqu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
664387623b736f616f49e6f544a9c371_JaffaCakes118

Files

664387623b736f616f49e6f544a9c371_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ