ace5e5106ff1f1c7f804dbc191ad658f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace5e5106ff1f1c7f804dbc191ad658f_JaffaCakes118
Size

562KB
MD5

ace5e5106ff1f1c7f804dbc191ad658f
SHA1

8006f5d19cb1345d8d26838a0bba6899333bbd74
SHA256

58a0935dde64c2abde99f13cd583f0952a73e388ec19e56f7c8f1bda6f715c1b
SHA512

5fcdef4dd48882f7357615b2659343f6f2705e65ffbda2501783645062bcbf528d75fde43f04ed322d98d00f9e8cc4c2af5b105f700f807fccb093cbd9176089
SSDEEP

12288:i5yVwn+M446nQvHIh/VryKVMbACMDzeEVI0uYGmEFD:6t+A27MAPqEVI0uXl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace5e5106ff1f1c7f804dbc191ad658f_JaffaCakes118

Files

ace5e5106ff1f1c7f804dbc191ad658f_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 479KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ