7485ef88f509fc462e4cdf956eecbef8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7485ef88f509fc462e4cdf956eecbef8_JaffaCakes118
Size

637KB
MD5

7485ef88f509fc462e4cdf956eecbef8
SHA1

34fc4b7853dc05ba1f7da41718dce28ade3fc6ed
SHA256

ce291540fb3be5ada352e4ff56a2e7c1f8c15ce87637dd0901041f8645315cc4
SHA512

e2a89437634c0c517b295bec0e6212a0296fd02a213c3cc82d1d3e8b767a0149d313746c220a089086db77e3b9dbe267d8eb2766b27500a3d1124c7f940fb7bf
SSDEEP

12288:YDgWqvSN63/Kw+8nUT2DLqrNkrB/RRPnFWdA2P1djfc:mpqvSK/1ZiCrB5RPnFWdTP1lf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7485ef88f509fc462e4cdf956eecbef8_JaffaCakes118

Files

7485ef88f509fc462e4cdf956eecbef8_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

CODE
Size: 546KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ