4273676e9559ea1a54d2fcb661984a76_JaffaCakes118 | Triage

Sharing

General

Target

4273676e9559ea1a54d2fcb661984a76_JaffaCakes118
Size

569KB
MD5

4273676e9559ea1a54d2fcb661984a76
SHA1

4a45a763cc394d842f9437ad5165cdb13a051b48
SHA256

770ecc78afd2590c9846b1a4102c9134e2f6e9194b1594dd5deff87e35bc93eb
SHA512

6d113b553bbe67dc530556bc105aa9efe45652ee4d5450881c05654a5de055378ba5a818b41f3147c040df21ec23d0879d1376fc74758d2ced5a713a6fb91a1f
SSDEEP

12288:zPfIdjsBCOASFWwPKrEWhK279nULxOSKyDIljo63n6ljqVJ/D:7IFmI6KrfKAZULxLKy363n6ljqVV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4273676e9559ea1a54d2fcb661984a76_JaffaCakes118

Files

4273676e9559ea1a54d2fcb661984a76_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ