a888dd3f2462769f3d82f5eb47415119_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a888dd3f2462769f3d82f5eb47415119_JaffaCakes118
Size

27KB
MD5

a888dd3f2462769f3d82f5eb47415119
SHA1

02ae1f7cdd717ad6b678519ec84d407686216194
SHA256

2e1a5d9463c7d4bfd8ff762e2100ab81460d032e4c87925c2bcb912241280e2d
SHA512

2d2bd266e83a56202a134424113b565ce1ff2c172a86744008086e65c3484d72f5b43ec9bf102d8552326e4b7b37ec2996861b4175d4742a87779b50ac7d9a31
SSDEEP

384:aaAGg5l1237QBVqJPMmSc2xck3qpr5Sw1+E6IYHyniC3h:aaAGwlN+UmSc2Kprt+N0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a888dd3f2462769f3d82f5eb47415119_JaffaCakes118

Files

a888dd3f2462769f3d82f5eb47415119_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bab2f88105f1aa3a1736a47b6649426b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

ExitThread
VirtualFree
VirtualAlloc
RtlUnwind
ExitProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetTickCount

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

iphlpapi

GetAdaptersAddresses
GetBestInterface

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ