cf384ca2a2bcd59ab6c913b282ad3102_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf384ca2a2bcd59ab6c913b282ad3102_JaffaCakes118
Size

248KB
MD5

cf384ca2a2bcd59ab6c913b282ad3102
SHA1

ded5399cb222d1eaa0cff5722ba44af5cf8ea251
SHA256

9bc0ea4347e7452bd0053aec4ee91f16eac8f4d7fddbd2ac545de3c8241ace4f
SHA512

556d682f7e0966939c01bf023b27a0a80be868ffb32baa8452af65cebd255226a1a7e21704743214b6ac7bebe3f98c489efc28a8c67983585e9f2cbbab8a1a6d
SSDEEP

3072:kL03ZT7sbbuWMs0gUmSGyG5THxET1OsR3oHXh3g0jkew0IwpufGUzES+hSfVLuP1:jQbyq0gUH6+T1OsOXFVpufvV+hX9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf384ca2a2bcd59ab6c913b282ad3102_JaffaCakes118

Files

cf384ca2a2bcd59ab6c913b282ad3102_JaffaCakes118
.dll windows:4 windows x86 arch:x86

34791ae38acd8fb7511ed469a529d344

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
exit
ceil
floor

kernel32

FatalAppExitA
TlsSetValue
TlsAlloc
LocalFree
TlsGetValue
LocalAlloc
TlsFree

Exports

Exports

iplAllocateImage
iplCreateImageHeader
iplDeallocateHeader
iplDeallocateImage
iplResize

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 577B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ