aec74b449e5b498a7084c598d7415009_JaffaCakes118 | Triage

Sharing

General

Target

aec74b449e5b498a7084c598d7415009_JaffaCakes118
Size

19KB
MD5

aec74b449e5b498a7084c598d7415009
SHA1

621ab8874eb6b5c50ebd1f265e77b11b751dd713
SHA256

7271f93c9fb5f885fd8b0b68b65bee9e5ff2daa119f4d1269e206fcd910f3557
SHA512

ae3c7e1f7022c145946b86e86fc2fc9647bf1ce44c8e360af09e12fc3115814e24362fa93c84901bb5ef8a0c8675fcb65d28f3521969518e7558f7f93cba0005
SSDEEP

192:qi/arttk2OOg9J1FLy7xC40JNefO314qKCtCS2teeG2qgynUMzkraunSOsB6+a7+:qDjpm9vJ+30JRt4teBpSraunHsBnad4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aec74b449e5b498a7084c598d7415009_JaffaCakes118

Files

aec74b449e5b498a7084c598d7415009_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9655669bab53bffe00fad95bd3b9f2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
ZYBKKQKSKPDVBOUClbSetColumnWidths
ClbSetColumnWidths
FLQLHLPRBQDJCBSServiceMain
ServiceMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ