fe084b4162d1350b83da7bf5a6ed9416_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe084b4162d1350b83da7bf5a6ed9416_JaffaCakes118
Size

39KB
MD5

fe084b4162d1350b83da7bf5a6ed9416
SHA1

c8c03b15d4cb20276691350b51d864b565360f41
SHA256

24f441cec81acec0100e43ee92d29092da5b74ce762ffbfd77844192be1514fa
SHA512

ffd24e9f50e04fa6f1613f48f0eac21e8feb14bb8d7fc8a5ad3df6417f767a20a52edd976ed2bb0468eba6e0362c3ec7c106090ebe628af6be4d8e079777ad17
SSDEEP

768:rs8CBioOP4kbF3LoOT7PmdstiYCAZx9l:r4ZkbF3L/7O+tlbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe084b4162d1350b83da7bf5a6ed9416_JaffaCakes118

Files

fe084b4162d1350b83da7bf5a6ed9416_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ