786d5932dbdd5561b84e945294a48273_JaffaCakes118 | Triage

Sharing

General

Target

786d5932dbdd5561b84e945294a48273_JaffaCakes118
Size

83KB
MD5

786d5932dbdd5561b84e945294a48273
SHA1

3cb6c8d607d2ba77628862fc0db57479c4325624
SHA256

b808802e493ef45b5df3228eeb8e0a767396d61da73b5cd63fa42fe8bf2405f2
SHA512

956dfb6d9292aede8bf58dd4b8dafa11c67a667345ed96091394cadcb2defe38d09730957685787c2cacb04c1a23298dd8c6531817fa18604ee81ffc79cdd5fd
SSDEEP

1536:Y0Fq/QUG2pU6r/HkASYemoAMwJubvmDjeSQmpeVN4bfQl+0uye:41VpUEfkSe5/w8Lm3ep2Yltuye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
786d5932dbdd5561b84e945294a48273_JaffaCakes118

Files

786d5932dbdd5561b84e945294a48273_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

.MaskPE
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ