c244c9010063ff0cf743c2bdbc303304_JaffaCakes118 | Triage

Sharing

General

Target

c244c9010063ff0cf743c2bdbc303304_JaffaCakes118
Size

217KB
MD5

c244c9010063ff0cf743c2bdbc303304
SHA1

fec7313f6c2066a726521a867894b0f27a7070a6
SHA256

fcbc700815b2b76d859d15e9f92b844d72245ae4633b44d3c3330969c39972ee
SHA512

6229e19983482d89c2590224d1f3fce33fc312d7d6b22c1d57cf8b193f5cbda259c31fb6cf1ab0b5f4eac5109ce80b3ed677de26302b5b6033f7a58ebb2af893
SSDEEP

6144:L9b7aE9b7aE9b7aE9b7aE9b7aE9b7aE9b7a:pPaSPaSPaSPaSPaSPaSPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c244c9010063ff0cf743c2bdbc303304_JaffaCakes118

Files

c244c9010063ff0cf743c2bdbc303304_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJhjkFdsa

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ