d6ce20ce7320545233145c9ddf42f6e1_JaffaCakes118 | Triage

Sharing

General

Target

d6ce20ce7320545233145c9ddf42f6e1_JaffaCakes118
Size

603KB
MD5

d6ce20ce7320545233145c9ddf42f6e1
SHA1

0d938250ec001a7c780b0f77bac85a6586f319fa
SHA256

35cf05e892a538a114b76d7de86c60736e71d1f3324ea3d9456c6b79f5efc874
SHA512

1409f4070fc0d19f2291c322540d1ee362b4a641db3f986a3407c9fd526807a47200cb6a494ae257aa8275b63176a23c95bfe28286cd33396ef5e78e38cfe336
SSDEEP

12288:YzhE5dYTYMNC3GYjXdOZo7EDfXKtohn7BDRMtO:YyGAOe7EDaSvR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6ce20ce7320545233145c9ddf42f6e1_JaffaCakes118

Files

d6ce20ce7320545233145c9ddf42f6e1_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 449B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ