28072e1c93d30ae22e6bb6d75778e82b_JaffaCakes118 | Triage

Sharing

General

Target

28072e1c93d30ae22e6bb6d75778e82b_JaffaCakes118
Size

558KB
MD5

28072e1c93d30ae22e6bb6d75778e82b
SHA1

af6853f9d620cf953432d9b7e418ee1366b811d9
SHA256

6904538c11abf76ca2159022f5bcc1c626276e59e8545870954ecff9a2b1b972
SHA512

fa3df7fa87ddffefde4f443199e90e1f864290dd944ebc6f7122d065521126370b63a1e3b557713c475d7b2499e4f24e450d6c5bda759ec50259d971379303bf
SSDEEP

12288:e0Et9YDc/Tk4Po4wSSqodPF9C2vTgYkcmyL4q:OtWDcw4o4Ts/9Ckk44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28072e1c93d30ae22e6bb6d75778e82b_JaffaCakes118

Files

28072e1c93d30ae22e6bb6d75778e82b_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 486KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ