b77b30e7a8df82f471c0b2b78f8d7466_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b77b30e7a8df82f471c0b2b78f8d7466_JaffaCakes118
Size

9KB
MD5

b77b30e7a8df82f471c0b2b78f8d7466
SHA1

7239d5abc9cd9c33608b995d06e78d7ed80d95c0
SHA256

88877006003586dded48aed8a96d40bff4983e816a58f59a1960387e431ce823
SHA512

728e476e956d251b331ba6f5f9c1bd786e46425eb08f2d433413d6f16b663641f3969f8d9c9c7482abbfe5421c2cb91c385a6c10442a80b9823ab069dea8cf43
SSDEEP

96:AOQFXXuysW4BmNhoYQilRQf34bVZ1KUyIA/9Te4+fUJoMjHCBwN+EEGJuRD:AOQhXl4BmPDlRQf34bkf1Te4a3EiSN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b77b30e7a8df82f471c0b2b78f8d7466_JaffaCakes118

Files

b77b30e7a8df82f471c0b2b78f8d7466_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9655669bab53bffe00fad95bd3b9f2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
ITYZZHPT
ClbSetColumnWidths
YNVAKAXS
ServiceHandler
ServiceMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ