14ba5415e58a482ea231913c63e906ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14ba5415e58a482ea231913c63e906ff_JaffaCakes118
Size

101KB
MD5

14ba5415e58a482ea231913c63e906ff
SHA1

3eff64afdc7e1f8f228a2e39c4920007166f5458
SHA256

12e99d68e9bd7629012a7f9ca25fa50cc9089325896b0aecbc82e36d263354dc
SHA512

0dec21fa4fb6effcd7e9495ec5d7a122d37c5299fc8aec6a779b7e62f1daa93f032e92bd4c49331a1f9fe31b7f6e063c96325656e23f9abf124f1f83f983b584
SSDEEP

1536:hYAqPeEGw7AqVE7Uu2TNb6RAWzkwj+gBeylyAi4zzXOfsFXcI0crsjGn:Z9XBKQj+gUyd3efsFsArsjGn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ba5415e58a482ea231913c63e906ff_JaffaCakes118

Files

14ba5415e58a482ea231913c63e906ff_JaffaCakes118
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ