3c8a7d3edc0433483440af2e50359548_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c8a7d3edc0433483440af2e50359548_JaffaCakes118
Size

59KB
MD5

3c8a7d3edc0433483440af2e50359548
SHA1

300ce7f1d7e840a1a85c955cac86642ad2a322d1
SHA256

c5d952e4a7de334b08254408e00e3c78fcc10e92b4977c537366b98f15b125c6
SHA512

9b4d7cf85e04e36a6b075a0a260b844811a36ccc635371521a4835358950fca9e484f0261645801467c7d5dba04917dcc4a0f09687849db6abc3eeeb010f9eef
SSDEEP

768:JWs89cpC4IROCBtt1FwvT0gOAE7P/smGTJ60w/bsMrNiOUkCw6u4U3pAgdupq+Ur:kbhRBtXFwvSk9N60wHiJkCnqJj+89r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c8a7d3edc0433483440af2e50359548_JaffaCakes118

Files

3c8a7d3edc0433483440af2e50359548_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TCDCD
TCVCD

Sections

CODE
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ