a53f4d1b3ce7c3b452096fc6735b3187_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a53f4d1b3ce7c3b452096fc6735b3187_JaffaCakes118
Size

579KB
MD5

a53f4d1b3ce7c3b452096fc6735b3187
SHA1

db88b3b0eb1e759326566acfbde5be2d9f3a694e
SHA256

60f4e55bdcb1d5d6303cbe0ad87fc6365c45cce149c51ada2dc8593ee1359882
SHA512

d539f508bb10cbd2c0b883ab67f5eb5e8a55c2b9ee576f0889fe43a718495bdadbadfa6074649bf83b5c8acaa03011645961da04e16ee413f2ed71ae0c18f40e
SSDEEP

12288:XnkEAl29jr+1l4tB7outulAjUTP/UiJZ/6ckw9+e:3AAr+1StBMuEgUDnJAckr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a53f4d1b3ce7c3b452096fc6735b3187_JaffaCakes118

Files

a53f4d1b3ce7c3b452096fc6735b3187_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 490KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ