03a2acd5a6461738b8f97f223c4f8547_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03a2acd5a6461738b8f97f223c4f8547_JaffaCakes118
Size

4KB
MD5

03a2acd5a6461738b8f97f223c4f8547
SHA1

107714e1aaf403a66a44b72e721c288751b5428a
SHA256

9529527bd425b1483f26c9722a5edf2cf4cb40429dd34aa3a24190e32e47b204
SHA512

fa6f24cd8616790f8d01cf29c22e39d500ee7606c2deadcdc5fe73e0461b56157530b9c7a7e754f741883dcc3abe90442d8d1a8c250d593a07819581d9de3dc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03a2acd5a6461738b8f97f223c4f8547_JaffaCakes118

Files

03a2acd5a6461738b8f97f223c4f8547_JaffaCakes118
.exe windows:1 windows x64 arch:x64

39dd2e2e0f892339fea0bfd7d3fab539

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
GetCurrentProcess
GetProcAddress
LoadLibraryA
RtlZeroMemory
Sleep
VirtualAlloc

user32

MessageBoxA

wsock32

WSAStartup
connect
htons
select
send

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE