4c1e05a9277fe4039fbb979d28cfe408_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c1e05a9277fe4039fbb979d28cfe408_JaffaCakes118
Size

19KB
MD5

4c1e05a9277fe4039fbb979d28cfe408
SHA1

7dff45331b24eeee4c6f48d8d215723b9d75e134
SHA256

411c49309f389f3fa1ef277bff6e003695c51721b49d4e089e140befe2ef846f
SHA512

cdb0faf816298b1d46e280a189e992bcd5be93a7f73f5f608dc30b5b3f74f105798c3b2bf3b948baa67abe53cf7a78b07961799e4a380290c16f65aa7ae7e11d
SSDEEP

384:qI0E3jC9H4cwJWSV3WOxdrVxRSMiItC4JfB9Bn6gd4:2EzC9HRwcaGOXrVLSMjPB3/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c1e05a9277fe4039fbb979d28cfe408_JaffaCakes118

Files

4c1e05a9277fe4039fbb979d28cfe408_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9655669bab53bffe00fad95bd3b9f2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
IYYLREHUBFJNJVIClbSetColumnWidths
ClbSetColumnWidths
NAUTBCGMDFUZSLOServiceMain
ServiceMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ