d2f626e552ed959e80acf620eaa08170_JaffaCakes118 | Triage

Sharing

General

Target

d2f626e552ed959e80acf620eaa08170_JaffaCakes118
Size

475KB
MD5

d2f626e552ed959e80acf620eaa08170
SHA1

f80c27a07ffc3013735ca87136da44da06131c94
SHA256

53f20d00a9f521523e54eaec1b28da71556365167e61aec88644061eb2e18552
SHA512

6122554b26852eb7ee8db8d8a3b33a3adfeda6be3ccb37a1fcd6d9e3e2bfbf0f0c4941e72f96b8f9149dde6f70b7044aaea586eaed41a5deb1e491f5f6067056
SSDEEP

12288:ZQcuoa8EpOmzh6mea0JogrKsLoD/7ijTi1N:ZpRqpJwmeazluoD2PiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2f626e552ed959e80acf620eaa08170_JaffaCakes118

Files

d2f626e552ed959e80acf620eaa08170_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ