a763fac1e942bca08062dcbb327172d5_JaffaCakes118 | Triage

Sharing

General

Target

a763fac1e942bca08062dcbb327172d5_JaffaCakes118
Size

15KB
MD5

a763fac1e942bca08062dcbb327172d5
SHA1

856e8e6c6e22a850ab6e15e30f39a8900eac9c82
SHA256

c0e47b25b5fc9213982f68c6d314220777a2ab711f35848c0e424bb0d416e075
SHA512

13997d778726e9d0c00230e51bdeed9f2b6aba9bbc9be05adf4cb195678e4633d738a71328f50038a9cb0f597715d02c87ffd1284bbe843e8c5ea72934046a15
SSDEEP

384:45/nK9ZcfHL21qvoQhxmqqephDQ3y1CXP1K9Wt:4xSZMvoQhxmp21Qi1CXPUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a763fac1e942bca08062dcbb327172d5_JaffaCakes118

Files

a763fac1e942bca08062dcbb327172d5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2938b32fc568b3c6e1e8c84ff501d7d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset
free
memcpy
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
KWYYXAGZOUVUDILClbSetColumnWidths
ClbSetColumnWidths
YJLQEGIYNWCNDIVServiceMain
ServiceMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ