c852ae679801525e453dece736a42238_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c852ae679801525e453dece736a42238_JaffaCakes118
Size

592KB
MD5

c852ae679801525e453dece736a42238
SHA1

2164814e3b9ad8ec96564026059d63efb99887dc
SHA256

efd3fbd4a2122dd141c62690524e98a6240bbc0a9c4651d0332bc25aeefbf68d
SHA512

1cb9f2bd8c568a345bb77b1a6feda3665a5263b479274bdf101508cb992b582d58abf37091aa7a4886af38163bd987a09474bb13b9cc91614e13582215d31537
SSDEEP

12288:wnwhE5fAgKRmavLrk98t/Vkl5i8d/VfZoREDfXKtoEy7BQ:wsgWkQiL1eREDaS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c852ae679801525e453dece736a42238_JaffaCakes118

Files

c852ae679801525e453dece736a42238_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 437B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ