032f765f070922d4d0c90c39f3cf417b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

032f765f070922d4d0c90c39f3cf417b_JaffaCakes118
Size

2KB
MD5

032f765f070922d4d0c90c39f3cf417b
SHA1

5cf8660b88af2d1f430213486732b5358b313bd7
SHA256

911e6e74113d4b3f25f8a962272be84a2c16a10a4f25a6d8a356f183222c4161
SHA512

a7e851af15b4fd8c37cdf2cc177d4fbbdab7ab384c455e14fff18d9235425a88ccedd392ced8a6c7257686b1864aef8a2337032f0a026e961a56a42509df4d43

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
032f765f070922d4d0c90c39f3cf417b_JaffaCakes118

Files

032f765f070922d4d0c90c39f3cf417b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5f3db11dcaf2fa55d4f6f91659d0ecf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

netapi32

NetLocalGroupAddMembers
NetUserAdd

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE