de41988b8f63ed4b7acc878edb11cb8b_JaffaCakes118 | Triage

Sharing

General

Target

de41988b8f63ed4b7acc878edb11cb8b_JaffaCakes118
Size

61KB
MD5

de41988b8f63ed4b7acc878edb11cb8b
SHA1

600580a8c0fcc1e2066424d4a2b6c4e266c4f354
SHA256

dd75f05cfc8f1b026bc166558c470e0428ac31ae2a29927ca5b76cde14b2bd56
SHA512

07d73e636cab060f9e302c9e29ccb725a0b3448cdb4638a909ae1a915848989c361368990fd867761a63c080f2a4fb657d80d0af6f991dcb4df33cedbb1ad74b
SSDEEP

768:ieP9hyfY8hV0mKu3wTCcUsWxWwETeP9hyfY8hV0mKu3wTCcUsWxWwE:ikfyf+uFsPTkfyf+uFsP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de41988b8f63ed4b7acc878edb11cb8b_JaffaCakes118

Files

de41988b8f63ed4b7acc878edb11cb8b_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ