215458b57fc048cfbbc1d0ce3a84e5a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

215458b57fc048cfbbc1d0ce3a84e5a2_JaffaCakes118
Size

8KB
MD5

215458b57fc048cfbbc1d0ce3a84e5a2
SHA1

6c392f8d18fcfa469973479b9b3921bc5a97ce97
SHA256

cf35466c0ee11c55f1262a6d54748386f786537a7d8705fe70b373e69f0364fc
SHA512

60ca869f15c8b8695002fe29f2227439d9346cc327377560a957abf2706c625b43ef3ece684fac1853f9520eb91f9509861b580a50734c3d67afca7c7128bdf4
SSDEEP

96:sFgkW2E98Sfb3fRg0IdzjtFatr2a0KXDFiJw1zV3FA46blR:4gkW2CpT3fR9au0uii1zVR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
215458b57fc048cfbbc1d0ce3a84e5a2_JaffaCakes118

Files

215458b57fc048cfbbc1d0ce3a84e5a2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c12f2485c8efa2d70aa9fdc5113c938f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strrchr
exit
malloc
__CxxFrameHandler
free
_initterm
_adjust_fdiv
_wcsnicmp
_strlwr
_stricmp

Exports

Exports

ClbAddData
ClbSetColumnWidths

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 507B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ