f2a912fe15ee0f69956e4fa6dc6021dc_JaffaCakes118 | Triage

Sharing

General

Target

f2a912fe15ee0f69956e4fa6dc6021dc_JaffaCakes118
Size

32KB
MD5

f2a912fe15ee0f69956e4fa6dc6021dc
SHA1

3ffcfe015defb206e7f475c80b6e83b1827d3873
SHA256

7281672c578e784a7b583a8dbed5a7cce85bd1b80459d118bf388ed2d10542b4
SHA512

ed7d78eec06fe9c0ca8d751f505a5f74caecb1534c65615c48439819185d3f9645fd722f29f5fea73f3b385f5ae5035bdbce0ff81b4e8b1b7add902ec8d183ba
SSDEEP

384:FGplGbEzM/1i88suHRq2+h7Mb1T+dPy30/6qQ2:FG+ozMdVcHg9MbYw3i66

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2a912fe15ee0f69956e4fa6dc6021dc_JaffaCakes118

Files

f2a912fe15ee0f69956e4fa6dc6021dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abef8fafd7c126b8c4dc4575548f83f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

iphlpapi

GetAdaptersInfo

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
memset
fclose
fwrite
fopen
memcpy
fread
fseek
__CxxFrameHandler
sprintf
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE