54da2e3689866a97e0ed53bb2397f2d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54da2e3689866a97e0ed53bb2397f2d6_JaffaCakes118
Size

674KB
MD5

54da2e3689866a97e0ed53bb2397f2d6
SHA1

a832eee861cdcf4ee44bdc0e44a50eab39574ef2
SHA256

79f982a5673015e3ea28809a03dcbec9cc5e59e27c770d7148cdc0fe8df6b92b
SHA512

195b1273fd73ddbdd6366c93f56f85298d2a29ba9411f2726c7abe7bd361d0d1d516f5f92e0dde94926515e662f47a4c2352de0a0d323c101b7e6420111e83d1
SSDEEP

12288:cwO0UFmRHRdZ8VyQ+ONEbTB39tCN24Wl9/XTQwZ9w/RyCgp2tePm:cT0CmtvOEQ3IE24Q/XTQwZaHgpA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54da2e3689866a97e0ed53bb2397f2d6_JaffaCakes118

Files

54da2e3689866a97e0ed53bb2397f2d6_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ