fddfcdabbdcee22f4a5bc714ae3523ec_JaffaCakes118 | Triage

Sharing

General

Target

fddfcdabbdcee22f4a5bc714ae3523ec_JaffaCakes118
Size

156KB
MD5

fddfcdabbdcee22f4a5bc714ae3523ec
SHA1

6a3d052d64a2ef9da54674b7fa096d2da4c242a9
SHA256

406492fcb9b10f0d9cebbd0c6d21f91c5abd3e4d763f8d6389740836166186ca
SHA512

6cbda9e882c315da026b400a0b52cd2860cdd85d5f56b5a170195138c4612befb79ef749a3c77189935f39da49aae96999c8486fc77c82c37cff56661eb2171d
SSDEEP

3072:UIfi6M+yZ4KBQDw3QBpq3ynj6ARCPBr+MDRpu0gP+rpEhoRxAkI6:UN6M+yHceQBpq86ARCPJnmrmc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fddfcdabbdcee22f4a5bc714ae3523ec_JaffaCakes118

Files

fddfcdabbdcee22f4a5bc714ae3523ec_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ