fbdb5420afa0563f8212c68d3e2b1f29_JaffaCakes118 | Triage

Sharing

General

Target

fbdb5420afa0563f8212c68d3e2b1f29_JaffaCakes118
Size

29KB
MD5

fbdb5420afa0563f8212c68d3e2b1f29
SHA1

7d3dabe994dc6ddd0ceb314de91cd11cab1b36b0
SHA256

a5695524b62d87f4ca25ffb0a87889beabf401de51e138a98b55a4a7f333226d
SHA512

6f6044f9700df4cedc562561f9029a0c4019cd97582c1c3c6ca3aca73c770fe9bce0aaecbf27e01cfbed5863ed44b41a24a0625d3a1d0a8256b81a6bc6fd730d
SSDEEP

384:qNNe06t9hc85kxzSgojxLBEHRB1OM/q41q/22yQOKcDhMlxS2gMaQkW28WIHfvyg:eeP9h5FB8P+41qe2H9uahJkgWwfs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbdb5420afa0563f8212c68d3e2b1f29_JaffaCakes118

Files

fbdb5420afa0563f8212c68d3e2b1f29_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHjkFdsa

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ