a2eb39776ed820f1a63289bd3e278b52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2eb39776ed820f1a63289bd3e278b52_JaffaCakes118
Size

578KB
MD5

a2eb39776ed820f1a63289bd3e278b52
SHA1

08ac74e7d03a661fe1884052ec4be079b12fb082
SHA256

9bd8dc0a1e5443cae7e3c67a616d0812acddf84b12daa687d93450db3a404c28
SHA512

6dc47bd661d4f7761f33b8ce92d4ce239e9dc8ff7f914df49378f1cbe0d273d6d50ece679913dc1729c7e6f5ee40bf390acbe2f6b91e36ec461b57b47abd255b
SSDEEP

12288:iy6y5qw13PAO+0iErbMu+UHcSZvNI6djmGcf/eMFcfTFul7SN:it4qSPl+0igh+uZlIYFC/tcfTFk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2eb39776ed820f1a63289bd3e278b52_JaffaCakes118

Files

a2eb39776ed820f1a63289bd3e278b52_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 485KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 138B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ