c1a11e9d8508540fb8481c8703c42878_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1a11e9d8508540fb8481c8703c42878_JaffaCakes118
Size

1003KB
MD5

c1a11e9d8508540fb8481c8703c42878
SHA1

a4119ddcd5e1a906252de1d463d90932cf7e9cd4
SHA256

f6b995e96e34059e9aef789f3b9168b32cf30babcb124885de53c93fa8154dfd
SHA512

9c60aee98407ecbfb0a169eca76c32e8ae3050d415808c2445a2269dbbf05f4f5d1c6dc9ced6c19319d39bffa058415cc6397e7f1e143ae02c67cdca9d642384
SSDEEP

24576:HBOV4sQp1CM6QhiZOOB3g8HGz+zP2JES3Kbd:HKynNiZO13zIPn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1a11e9d8508540fb8481c8703c42878_JaffaCakes118

Files

c1a11e9d8508540fb8481c8703c42878_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ