269be6501d8f51cbf40cfd5588082f19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

269be6501d8f51cbf40cfd5588082f19_JaffaCakes118
Size

19KB
MD5

269be6501d8f51cbf40cfd5588082f19
SHA1

a4042117a5fb454b7cc60ae88438ca49c4b8909a
SHA256

707393396e04a185160982a412db484277e7547aafdf1a0aeb115c42e5cf6a28
SHA512

ac9e6da6b91a2160425d2ad8a3b7713f2d9e61fe8dc362b02d5d31226ccf467b8b2efb98b1d1a7861a957e55fdb9486f31b2de85023296d1d35120307b1a6b64
SSDEEP

192:qih9ZeL6anbOsevvw+hWWGDyKysJgXvx2vMMDjl7ZBIg8zBZludlpP85t3B6+g7+:qQkpSvwOQmhmc4J4ludM5t3Bngd4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
269be6501d8f51cbf40cfd5588082f19_JaffaCakes118

Files

269be6501d8f51cbf40cfd5588082f19_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9655669bab53bffe00fad95bd3b9f2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
XRBPZVPSPGOZKNGClbSetColumnWidths
ClbSetColumnWidths
NHNVDPPNUCVUADBServiceMain
ServiceMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ