698252122cedace8515a1081d48cf3db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

698252122cedace8515a1081d48cf3db_JaffaCakes118
Size

709KB
MD5

698252122cedace8515a1081d48cf3db
SHA1

32f8feff7e26310bbb225e2a540a1cec27759491
SHA256

6d3c80b4f3b0bcd22fa230c044e084824a1032328e0cb9c9d5cf7869f4266798
SHA512

0d0199cfe6c904ed2b4b8cc06d0998cdbdfd41c7895b83bfb6c16db91837810caf4370fb5dfa67f8d2fe818643652f766f26d2a4f17636905e2cf79e4560fd9e
SSDEEP

12288:Npo9Ercfgs7MGLUr1zs+1a0KF46FyQKZzy:ziE6gmVUrm+814cyQKZ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
698252122cedace8515a1081d48cf3db_JaffaCakes118

Files

698252122cedace8515a1081d48cf3db_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ