17dcb84d35adde74fa24e14bee3f0799_JaffaCakes118 | Triage

Sharing

General

Target

17dcb84d35adde74fa24e14bee3f0799_JaffaCakes118
Size

19KB
MD5

17dcb84d35adde74fa24e14bee3f0799
SHA1

5a3373c2175bc738c10d73ae0ee13e665b904413
SHA256

caa3ff996608db8bc21f41b80cef80c8c7f3c8d42e9461eb3371f3d628da2a6a
SHA512

fe0face152eb733e080a469646775da6791b922d039e8416a23d9a59b64945781ab428877db215c26a03b71ddec344d4167b6f5ea080d61c56cc35e8f6cc162b
SSDEEP

384:qUcRjivoCWcE99GGOxlMj9TaK6YzATLqxy6Br:qU2HC12MGOaNatLqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17dcb84d35adde74fa24e14bee3f0799_JaffaCakes118

Files

17dcb84d35adde74fa24e14bee3f0799_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ