a86073362746c52871047524c5f77ca5_JaffaCakes118 | Triage

Sharing

General

Target

a86073362746c52871047524c5f77ca5_JaffaCakes118
Size

565KB
MD5

a86073362746c52871047524c5f77ca5
SHA1

dab46308288c23109245af236260dae9d92755bc
SHA256

73792155ef735fd243756285ff55cb5b4a2c229da87aabc75a6381fbdf38386f
SHA512

fb0d66c43f9053ff7199698b407f64b2204014502db12d3e5f4285241e32b2877ce5c97410ab7605ab0d1b703568c9aa7d96e09df4735c3df3a06565e1932e7f
SSDEEP

12288:mAFp96Ffv/aX/tOo0O00w8NJidSCnTLtb7xZZsOluVBwt:PFv6piXQob009qSCXp9ZZsWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a86073362746c52871047524c5f77ca5_JaffaCakes118

Files

a86073362746c52871047524c5f77ca5_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ