cfc23ba6e0a963e6e5309f7ff1b583f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfc23ba6e0a963e6e5309f7ff1b583f4_JaffaCakes118
Size

604KB
MD5

cfc23ba6e0a963e6e5309f7ff1b583f4
SHA1

9565e956a903c152d54ffd68b65de7f647e458e8
SHA256

baaa0374bf33705738927086eca445d261cce951c969738312833bae69b211cc
SHA512

fc44088259867bbaff09d623d6806f4071ee430565fdaf834fc266e78ff79762a24531f525a89bca3bd7254395d6c41a6be10a0e4bbef86963e95ca6d9f76428
SSDEEP

12288:n9hE5/C5uCvb9OHn8vuGZoREDfXKtoe98n7Bjp:VOH8vuGeREDaSEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfc23ba6e0a963e6e5309f7ff1b583f4_JaffaCakes118

Files

cfc23ba6e0a963e6e5309f7ff1b583f4_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 437B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ