d9ac1c04d5c612c10b9411ae5615df86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9ac1c04d5c612c10b9411ae5615df86_JaffaCakes118
Size

11KB
MD5

d9ac1c04d5c612c10b9411ae5615df86
SHA1

5c13bb2bdf515b75f55bb7d2066e3e9a5a29b672
SHA256

4e92fcd417f88585473ae69cf48da1d0d15e97901e996d43524b85edadea5612
SHA512

7c3fd5a830a8e6aedf3208542c842a03231dfecb9d092e4b8ef87ff5b0afc62a33fdb41526b9304a8088c7dff11dd2ddbd1e461aa62271b72a6eaae42782977b
SSDEEP

192:MZPRLwYrkx+M6BoEE2RBgJ2oK/QfoP86QP:MZJLw6e32RBxouP86QP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9ac1c04d5c612c10b9411ae5615df86_JaffaCakes118

Files

d9ac1c04d5c612c10b9411ae5615df86_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3b200719d742762994988cff599d5157

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
fabs
memset
exit
getc
_inp
memcpy
strlen
_initterm
_adjust_fdiv
strcpy
free

kernel32

CloseHandle

Exports

Exports

A
B
C
ClbAddData
ClbB
ClbC
ClbSetColumnWidths
ClbT
D
I
HZVTHEQTHDV
T

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 593B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ