JaffaCakes118_8aae32d239d7271686be20a7622684e0 | Triage

Sharing

General

Target

JaffaCakes118_8aae32d239d7271686be20a7622684e0
Size

473KB
MD5

8aae32d239d7271686be20a7622684e0
SHA1

2aa08286f295e6f51bf4713a7a364951aa227bfd
SHA256

70734a09343722b539a1a3bcde3bec7922b695d7e4651cdebd5d7230ba558131
SHA512

593f080de92d1bcaed1c20f0fc9b2d2f4a3786840d5800d9aa9a9b7ffb0af59b672c152ca509bf825e01ab129773458132eef69a1b24225c36c531b85a8beaa6
SSDEEP

12288:Tmft8PTfDzdyExHtWTjI/U1a6q1mGL1lEkxjVJ:Ctgf7ZtWrImI1Vxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8aae32d239d7271686be20a7622684e0

Files

JaffaCakes118_8aae32d239d7271686be20a7622684e0
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 393KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ