8eab6d8a9d2f0bacebf27195431be138_JaffaCakes118 | Triage

Sharing

General

Target

8eab6d8a9d2f0bacebf27195431be138_JaffaCakes118
Size

126KB
MD5

8eab6d8a9d2f0bacebf27195431be138
SHA1

06f45d03888b425b7cb9afeee50396da88367738
SHA256

2ad52d40ed3e31eea06addca5c9b44a2c5fb57981d9fedae96e613ed28af33da
SHA512

7d1f13d67123bdce8f20e63ae65aa70a373ef76eacc8c3d2dab6962ae1215c2fe877b39be809efcd09f1989091384b00df0f5d2c65bd160da2d525fb01783d1b
SSDEEP

3072:TMpULWUQ8QBttE93u+r3FCCt3vDzpU8ClgXESewJKvI1wlyO:wGqUz+tE9t1t3BXEhw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eab6d8a9d2f0bacebf27195431be138_JaffaCakes118

Files

8eab6d8a9d2f0bacebf27195431be138_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

CODE
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ