895da6e3afef8b7749bf7965aa4d72bd_JaffaCakes118 | Triage

Sharing

General

Target

895da6e3afef8b7749bf7965aa4d72bd_JaffaCakes118
Size

173KB
MD5

895da6e3afef8b7749bf7965aa4d72bd
SHA1

b10516a99022225644a21705603f7890ff3a2256
SHA256

55f701f84aa4ee74be7792d86063563c33cbfde59151fea6990df2b0543b83be
SHA512

9ca57c7438e72e6730e92909faec002ab8770ca8b7f8343294e25da51c9ae6da12b0bbfaf8427ec0a13d9ee82d292a6979ed4e0d24b2116475ae9ab2c7cc5ed9
SSDEEP

3072:vjIMQMxUblgFoBAIn0fbKt+j6GstHNLT2fQFIfbCH7/Hr1Dy+:v0MQMxUHK++j6TzLafNCHbr1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
895da6e3afef8b7749bf7965aa4d72bd_JaffaCakes118

Files

895da6e3afef8b7749bf7965aa4d72bd_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

CODE
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ