b9c7216ded459f549e83a1d45a31b814_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9c7216ded459f549e83a1d45a31b814_JaffaCakes118
Size

14KB
MD5

b9c7216ded459f549e83a1d45a31b814
SHA1

336235f0c55a4e3afb5a84c9d99f521e2c10b9ac
SHA256

122b3cca8cd4a4a6abf781fe82f6bb0444fa0e0ab5db88385cb9ba5332f0737f
SHA512

ec686bb5df833560a634b0fc9ff238adf634cba3418309e8687e0f8b46c63611313421c0b507b283ff08379eb753fddd988eac30ab91661008e78ac28447c96c
SSDEEP

384:45F9J2/c3D5MsNtvFNyUg1Gmkh032ivD8zSWDE0dxnVso+ax:4Hz2/qlM2vIAm32+mSqtH7P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c7216ded459f549e83a1d45a31b814_JaffaCakes118

Files

b9c7216ded459f549e83a1d45a31b814_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e210935457b9b1c5b5d09213c57074f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
memset
exit
memcpy
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
DDBGDVZAFHMGPLUClbSetColumnWidths
ClbSetColumnWidths
NQGZUNQFJQWUBDGServiceMain
ServiceMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ