72188f896349f60e0932710a07365461_JaffaCakes118 | Triage

Sharing

General

Target

72188f896349f60e0932710a07365461_JaffaCakes118
Size

26KB
MD5

72188f896349f60e0932710a07365461
SHA1

f3ef1904ae576ce735e557c91a83317bff355c6d
SHA256

d443acbe142184b944edbb1ed52d1ded4e46ce0f81e70f0d58a3ce8d9b1041d6
SHA512

3bde48947a132b738bdf0e15e268ef0c902acbb7c0fa09e0bb10b2ae96e62775063e8025c0c997fc101b9123613295dca3aba3c464c8e16351de9705dc315bb3
SSDEEP

384:BE9inzM/1uGiHAyz3g9C7aB5kRkfldO5KOoD3d6CljeommWr4YxBEXmPTEEfJ96D:B/zMd7yzQ05g8CharEm7yD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72188f896349f60e0932710a07365461_JaffaCakes118

Files

72188f896349f60e0932710a07365461_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abef8fafd7c126b8c4dc4575548f83f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

iphlpapi

GetAdaptersInfo

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
memset
fclose
fwrite
fopen
memcpy
fread
fseek
__CxxFrameHandler
sprintf
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 889B - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 165B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE