1313fb5d443ee2ff9dfd3484ec381790_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1313fb5d443ee2ff9dfd3484ec381790_JaffaCakes118
Size

19KB
MD5

1313fb5d443ee2ff9dfd3484ec381790
SHA1

877bdd91df6d73180cd99834768e70eedfcf0364
SHA256

3ff18b2cc0509538d81565d8b97e8424d75e43d905af440193a55b8ad786c3a5
SHA512

28efa1b88a33c8b32bdc2455449a49732b9e2593b2738e6a7b36c10e1b063cd9df7cde0d97bc56aaf686c54f153d03fdec6fc1b0bd93240924b55af0ed475df2
SSDEEP

192:qiyJR9hp7tP8q12ttuxxsm+LFEY1WOrA843hTd8IQgTu/e2JQPE+OB6+h7hxL6:qdJ9V12vu/szFhxrA8V9tBBnhd4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1313fb5d443ee2ff9dfd3484ec381790_JaffaCakes118

Files

1313fb5d443ee2ff9dfd3484ec381790_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9655669bab53bffe00fad95bd3b9f2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
QLFPQHLCXLDTBTEClbSetColumnWidths
ClbSetColumnWidths
LRFPAGNNJKIQTOFServiceMain
ServiceMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ