e11cd18ec96862873b2b783a71510b77_JaffaCakes118 | Triage

Sharing

General

Target

e11cd18ec96862873b2b783a71510b77_JaffaCakes118
Size

128KB
MD5

e11cd18ec96862873b2b783a71510b77
SHA1

64cf38ae73002cfc77c76ed9cf7a2305d2dda36b
SHA256

f9803267f07e5760593ce4f2785a390145dd30b00ca8c33326e6cd325464abef
SHA512

6b4ca3544f96f8ee604786adaa7c5612198f57e99e2e80170c2123a9661655cffffd13df7deaee898383ede2ce57690dd8aa013eaa7e309a78438efffbb9ed54
SSDEEP

3072:UYMPPBTUImgJO39KAVpfm+IoXgRpiAcahtplVEY:FC9UvEONTmFkgRpiANhtplz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e11cd18ec96862873b2b783a71510b77_JaffaCakes118

Files

e11cd18ec96862873b2b783a71510b77_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ