787242073ca377cb6c381ab180746fdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

787242073ca377cb6c381ab180746fdf_JaffaCakes118
Size

36KB
MD5

787242073ca377cb6c381ab180746fdf
SHA1

cc903e209f30241d3d367d4b65213bf8c3f5ebd8
SHA256

6613a4582dc24a03fbfb1d0935f3fb1ca6161f23cbdc383c7f5019ed41b73ccb
SHA512

2638f2ee4589ce4dfc3ccc6851e0f1ec357718d14b4ca4a182d04499eae9057e124fc189b153bf3c42bb49c5187439ac53b35f18865127e7e1bd816e63cd399e
SSDEEP

768:5Qoi6qZOMQOppieaOiqjC3mKnuZ58NUKdQwr28:5Qv6qZpQcCIKuQK2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787242073ca377cb6c381ab180746fdf_JaffaCakes118

Files

787242073ca377cb6c381ab180746fdf_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ