ce063de77486c6e531366c073951f7ae_JaffaCakes118 | Triage

Sharing

General

Target

ce063de77486c6e531366c073951f7ae_JaffaCakes118
Size

224KB
MD5

ce063de77486c6e531366c073951f7ae
SHA1

ff2c550c21658895c2a08a3f989c2b4d2d577245
SHA256

3ac0aa39fe3e578fd9ea1e3d41966d00aa0098f182b441f377fc2cc457a71f93
SHA512

cc17aa4f8c47e09dc3626edcb8741db42c40bfd5522e5f5bc44e0e8893b1cfa1458955de32039fb1d829e6e81e534f4516a46cd6bfec522a6b3330533a7e78f5
SSDEEP

1536:7kfCR/BAwr0RSEolikfCR/BAwr0RSEolikfCR/BAwr0RSEolikfCR/BAwr0RSEoo:HP0KuP0KuP0KuP0KuP0KuP0KuP0K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce063de77486c6e531366c073951f7ae_JaffaCakes118

Files

ce063de77486c6e531366c073951f7ae_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ