2d44f0aac38e4904fe41303e8f334543_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d44f0aac38e4904fe41303e8f334543_JaffaCakes118
Size

15KB
MD5

2d44f0aac38e4904fe41303e8f334543
SHA1

53fc5589937a3cdb9903e673cb22b11f4f53db5f
SHA256

94ad8a88d5dbdfcb4bba4b6b00bdd32992192c12f401f85fe09b9960026cb625
SHA512

03e03ab1946ae1ea3d21d440cf238fae5ab954bcb280f93d7640514ef321a742faeae9ae6ff72a17e183c543f58ec72353f801a068d62fd266be9a31d9e22657
SSDEEP

384:45eJ/JoLOL3x21wTm/EoDQ3ZCXP1K9Wt:4wJxoac1wTm82QJCXPUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d44f0aac38e4904fe41303e8f334543_JaffaCakes118

Files

2d44f0aac38e4904fe41303e8f334543_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2938b32fc568b3c6e1e8c84ff501d7d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset
free
memcpy
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
XJHGYBSJYIDFHILClbSetColumnWidths
ClbSetColumnWidths
URQWJPVPRFAOYCOServiceMain
ServiceMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ