bc446ed3b8363a51d932c74a84cbbebb_JaffaCakes118 | Triage

Sharing

General

Target

bc446ed3b8363a51d932c74a84cbbebb_JaffaCakes118
Size

104KB
MD5

bc446ed3b8363a51d932c74a84cbbebb
SHA1

a02c4ed8d9132d0d75c847b3fc5ff7c301ae1e7d
SHA256

e90661fcdd9f9299b090d783f140b2e28144376cea0de3ec03fc0d9266abd4ae
SHA512

5c476108876d918aa5de8a8937f38b85b9e122d9c4f60b2f98c3f33a2f75c2a9c94318048aeb20b20903fb1b38678082d4bb4509dc556d5f7b4d0ae26030b91d
SSDEEP

1536:dDqfmkYjcdIsUozVNRsfqpD53zcILpT666VheqdfwKZUdf:BSm7wdIwTR4qp1zcIlT666X6GUdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc446ed3b8363a51d932c74a84cbbebb_JaffaCakes118

Files

bc446ed3b8363a51d932c74a84cbbebb_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ