c8c7ff77d220a4d4c25957e5ef8941ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8c7ff77d220a4d4c25957e5ef8941ef_JaffaCakes118
Size

150KB
MD5

c8c7ff77d220a4d4c25957e5ef8941ef
SHA1

715de8b841af6d3b841bacc809763f283fb95974
SHA256

dad3d6895117648b4b68b838eb4dad0f9dd4814867f76fcd18e9eb8242dd3283
SHA512

a84bcdfba6feb0d6c7cd9178629bcd3d1b2ab07be0a67df52b4b1bde74a20ebf1588875129c5fb7e25b27d2a33370d262308d4a658af13e7645816d31f0bee3a
SSDEEP

3072:DXdodCkeHNukAvuTchCdw4JAdkj6wamOPDaO7pg2Lq59bfVQ2o:rSdZq0oG4lj6wrO7pg2Lq59LU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8c7ff77d220a4d4c25957e5ef8941ef_JaffaCakes118

Files

c8c7ff77d220a4d4c25957e5ef8941ef_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ