23f7e5469275a1f8f8f6d5583121d77a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23f7e5469275a1f8f8f6d5583121d77a_JaffaCakes118
Size

15KB
MD5

23f7e5469275a1f8f8f6d5583121d77a
SHA1

e7357fb76be0656bfde1b4e760ae58baf3b026a2
SHA256

41f285c789d1cfdf3d863f14ee5c4ff26aadb1195e4f3d41a356abbd67ce3d67
SHA512

664a2b0313fabc7a0f86046a5e61cd572084bc66ebcb9493e8ed8d1aa1a3ce773a5593878ee512833b7347688e2a0b63a6523144b706d598febb81a6aee15737
SSDEEP

192:45ZwFRpjUZsUQD5goN6N2Rn4e7ELD6BS7Dyuo3kYCXPVvK9Wt:45Z23bDT20ELDdDQ3LCXP1K9Wt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23f7e5469275a1f8f8f6d5583121d77a_JaffaCakes118

Files

23f7e5469275a1f8f8f6d5583121d77a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2938b32fc568b3c6e1e8c84ff501d7d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset
free
memcpy
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
CEZLPJBOXZQKNNHClbSetColumnWidths
ClbSetColumnWidths
EBUCEWCNDXLKIMLServiceMain
ServiceMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ