fec638986ad5ce20afecfe58c3ade28f_JaffaCakes118 | Triage

Sharing

General

Target

fec638986ad5ce20afecfe58c3ade28f_JaffaCakes118
Size

652KB
MD5

fec638986ad5ce20afecfe58c3ade28f
SHA1

8a5b993b5db256d9deec062f9c03b0b37e7d5a29
SHA256

aee16ab7631f9ef84bc5a8a7f6c8fbf0ce880d4df298a4a56b67342b21da5a11
SHA512

bf4c8174d677c0e78600d1478231e11762cde56c817ed0c28ae87535137f1ab15caafd26b902df215857270ad232cbc9d2e5fcb4b4ca17df7e6b80e0d5866f17
SSDEEP

12288:utv0EYFWSCJZu51oBcvZHR1LL+Z6biLUWJy1BWcQ8HCqmoRIQae5e6oN97:CMEvSwsZBR5+UiLTiEfoRI36k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec638986ad5ce20afecfe58c3ade28f_JaffaCakes118

Files

fec638986ad5ce20afecfe58c3ade28f_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ