fab124890fa579b564d32e8096e2f4fa_JaffaCakes118 | Triage

Sharing

General

Target

fab124890fa579b564d32e8096e2f4fa_JaffaCakes118
Size

266KB
MD5

fab124890fa579b564d32e8096e2f4fa
SHA1

8f61d6d48301b6f7047abf0443c4e62efe0fbd44
SHA256

fa22f616375b5aea9ff6d58c7c3d096aca232cda53411597e145aebff3129a79
SHA512

937f17ef5b63666a3b979aab9cb8972d0066b11336dfae58206c0b37aee7327263f0015bc8b3b9cf056bb8c1604ee7dc962211e07a2c4bf177ad0ab9fa6d232b
SSDEEP

3072:I56j0XMYu56j0XMYu56j0XMYu56j0XMYu56j0XMYu56j0XMYu56j0XMY:qXyXyXyXyXyXyX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fab124890fa579b564d32e8096e2f4fa_JaffaCakes118

Files

fab124890fa579b564d32e8096e2f4fa_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ