0fdf5b566773353a02a497e2df1fec7b_JaffaCakes118 | Triage

Sharing

General

Target

0fdf5b566773353a02a497e2df1fec7b_JaffaCakes118
Size

622KB
MD5

0fdf5b566773353a02a497e2df1fec7b
SHA1

f8ec335f6d008a76ebb462d1c27139b2b34122b2
SHA256

ff1a5251b98f36183fdb1a601d64eddea5016fa8e906e3c3a9238a1fa76b4e25
SHA512

d5929ae7701234ae961a60bc43fb88a62bd9042e6767fb1a485e50ac5f95cea5989bcc160039a802bd61d8b39260b2c63fd4c64bac188fac13151317228f529b
SSDEEP

12288:ChE5VX9OP8IBCEO6vhd7ytZovEDfXKtoCn7Bk+rqpu3bq/aN/LOns:XYOq7ytevEDaSb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fdf5b566773353a02a497e2df1fec7b_JaffaCakes118

Files

0fdf5b566773353a02a497e2df1fec7b_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 437B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ