44760fa821e2e7641ae58975d1707eb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44760fa821e2e7641ae58975d1707eb4_JaffaCakes118
Size

99KB
MD5

44760fa821e2e7641ae58975d1707eb4
SHA1

d2c1cd8af3d534dac64482352424a5604cc212d5
SHA256

1ad18ae448638df78ca1ea758bf83b9167b7d9554fd1ac560d40dbc2c4b1c647
SHA512

887f162c16ec9e0b4f0f041f31c2dde95c08cdbb616b474a3af403dce82b13e68eff100a7f06fc452d2d91e6c564bbf92446a698b16cdd741ef3851e9d767bca
SSDEEP

1536:S8Q7lEeRt7LaOPVr0uBTPCZYFepF5eU7v5BOvyjN4Aet161k9pVLzP2FLQaMcMBx:STGatisVr7zLSbea0vyoPd9ru6eMBEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44760fa821e2e7641ae58975d1707eb4_JaffaCakes118

Files

44760fa821e2e7641ae58975d1707eb4_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Iklacpm
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 223B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ