a2ff70ded62e292be847bf5e8c8fc962_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2ff70ded62e292be847bf5e8c8fc962_JaffaCakes118
Size

605KB
MD5

a2ff70ded62e292be847bf5e8c8fc962
SHA1

51d9c28f6dc994fa10f9018cc9db1e2f7bfd4be5
SHA256

9a033c10c1d7df14fe8d673a01e371dc023829ed306a1ec3c3645d100f4da073
SHA512

21792b062f65efa2cd26add0580bf67191c034a2075d7645b21aacab1b1310ac80b8abd778236c04e7b38b3232c7dffa6f60208e417ad5bb260829f13d7db628
SSDEEP

12288:HhE5I0vDIcdiZ1NEkfKZoLEDfXKtoo8TR7B0AfOVlg:Z1ceLEDaSof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2ff70ded62e292be847bf5e8c8fc962_JaffaCakes118

Files

a2ff70ded62e292be847bf5e8c8fc962_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 445B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ