JaffaCakes118_197954a7334591ded8573e1eb70ef892fe03bd749d61802ffefbe79ee2a94b76 | Triage

Sharing

General

Target

JaffaCakes118_197954a7334591ded8573e1eb70ef892fe03bd749d61802ffefbe79ee2a94b76
Size

46KB
MD5

f708fa256b369595059cb2fe611d1e8b
SHA1

d8793b8589fd33aab49770addd503d46c58fb1e5
SHA256

197954a7334591ded8573e1eb70ef892fe03bd749d61802ffefbe79ee2a94b76
SHA512

77320f5fcb1e0eb7f3dc73acf1d0a7dc2de073012e32c3d3a1be9257f86719513c0c2110551dd990b0b93ab673d067c2431998030cfe79601038b5dff9323978
SSDEEP

768:nQs6ccf+JUYbX2i6dNsbBGb4XdXkunfjNwFQlGTDZNdN3dNpfdNoX:nvE+JUYbX2i6dNkGbKdUuLNwFQlGTdNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_197954a7334591ded8573e1eb70ef892fe03bd749d61802ffefbe79ee2a94b76

Files

JaffaCakes118_197954a7334591ded8573e1eb70ef892fe03bd749d61802ffefbe79ee2a94b76
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

?bjvdcuao@@YAHXZ
?ejepjrwge@@YAHXZ
?miwjm@@YAHXZ
DllRegisterServer
PluginInit

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ