e184ae0be90e935fd95c4c0aef0b0428_JaffaCakes118 | Triage

Sharing

General

Target

e184ae0be90e935fd95c4c0aef0b0428_JaffaCakes118
Size

654KB
MD5

e184ae0be90e935fd95c4c0aef0b0428
SHA1

29fea5dc04008a6364d9673996dcbb750a1f6238
SHA256

8895c423fd487e179921d25a4c371f06dfd5840344ff73c3046240095527968d
SHA512

36e62a5d1be3b7fd2bb26942a61631b6417bec032506057409c5f887dc62acc2768681a6337d82fcb276b85d97e5f706e9d4a15eb8e09c004f749d0d02eb1559
SSDEEP

12288:Ptv1W0IFGiS5JeprW70QxcPJHRFLL+p6r0k2JC1RW8QdHCqmoRIbdo1o6o4P:VM0PiQ85xRJ+U0Dy0IoRIbdb6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e184ae0be90e935fd95c4c0aef0b0428_JaffaCakes118

Files

e184ae0be90e935fd95c4c0aef0b0428_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ