3befa46f1096c930398dd50740c254a9_JaffaCakes118 | Triage

Sharing

General

Target

3befa46f1096c930398dd50740c254a9_JaffaCakes118
Size

568KB
MD5

3befa46f1096c930398dd50740c254a9
SHA1

629f80b816c4ee46428cff54fd207f7b1013cea0
SHA256

a496e6614611ff2cca9b1a462d02eed473358c8d431d2a24206c92ce3adcad54
SHA512

e7f642b4bcc438da58c303fd7f571dea5fb57d5940066712454c421ebc4f7a8db0273a9328486503891961b516db9fc772847051f3b521515a30c588ea6f1d79
SSDEEP

12288:DHCqAM6vj721fUXMgf1PuLpHz9vw8Gjk2PVgWK/Wqt4Vj:DiqTyO6dMLvwosVgl/pt4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3befa46f1096c930398dd50740c254a9_JaffaCakes118

Files

3befa46f1096c930398dd50740c254a9_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 494KB - Virtual size: 494KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ