77e787d1d8b32e4a947ec51d7e195afc_JaffaCakes118 | Triage

Sharing

General

Target

77e787d1d8b32e4a947ec51d7e195afc_JaffaCakes118
Size

96KB
MD5

77e787d1d8b32e4a947ec51d7e195afc
SHA1

88cc446bcbc01448bb7cca4070999734af408289
SHA256

9a92a1e9c8830288e521755edeb75007c910b68428db55c0c0e51445c2ac88d5
SHA512

50158e9c4331c80ccd5da71f1b533337eb8802b0a2457afc2e562f289426891757eefa39382f64f0f7257c2e91d195ffdb97f53e1644d038e1a0458fd55ceafe
SSDEEP

1536:ezvjSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhYM/E+tIzmd:CSHIG6mQwGmfOQd8YhYM/EMUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77e787d1d8b32e4a947ec51d7e195afc_JaffaCakes118

Files

77e787d1d8b32e4a947ec51d7e195afc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0239fd611af3d0e9b0c46c5837c80e09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getaddrinfo
freeaddrinfo
closesocket
WSAStartup
socket
send
recv
connect

kernel32

GetProcessHeap
HeapFree
HeapAlloc
SetLastError
GetLastError

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantInit
SysFreeString
SysAllocString

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE