82952a2414a89906440ce54f832500c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82952a2414a89906440ce54f832500c9_JaffaCakes118
Size

1.0MB
MD5

82952a2414a89906440ce54f832500c9
SHA1

39193bf8308988958821b64b89ca5b33e67024fc
SHA256

a7ab9194468f6ea44062afcabb5d8ecd9044fa6f3ee187879d44279e40d37d46
SHA512

abbc67b885247079c9b4d7b8f5a0a10175f5475986c923b85463308205eaf0e10202b6600a220b0cb14bc94709f9900d7d461621057d197ad8be0d58b3a7fad1
SSDEEP

12288:XqdZniXHetkHkz9+5sacWl/3sAPbvbsI+mcPZ2QsnWT5E1T2jgWE1p5w:6Tn6ra9+hD/3zzMmcBKWT5i2jy1pK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82952a2414a89906440ce54f832500c9_JaffaCakes118

Files

82952a2414a89906440ce54f832500c9_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ