ddd6cb34b9d87a5daa752f4f610fa42e_JaffaCakes118 | Triage

Sharing

General

Target

ddd6cb34b9d87a5daa752f4f610fa42e_JaffaCakes118
Size

68KB
MD5

ddd6cb34b9d87a5daa752f4f610fa42e
SHA1

f667d257c4df34b120d82d55828701c7c887cea1
SHA256

433b4bcf6fd2c6eb943e8775be4e1aa7794107b56367bfbef923ce1b5f4d47d0
SHA512

cb4362dd31adfb6c7f58c1b77b04a2e1290f3f51452b7d75b1ae06197534b6ca5f4525cf938fd0ea87e485784321fad24dd68c7c8e22cdb77f2be21445ae16c2
SSDEEP

1536:NwKK7m6+F9yVjt1+mrs88xjGnihMWSbPAeTZ:CKK7eF94ac8xjR3S7AeTZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddd6cb34b9d87a5daa752f4f610fa42e_JaffaCakes118

Files

ddd6cb34b9d87a5daa752f4f610fa42e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

regaexec
reganexec
regcomp
regerror
regexec
regfree
regncomp
regnexec

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ