00676313c8370bf67635696d48c4c4ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00676313c8370bf67635696d48c4c4ba_JaffaCakes118
Size

43KB
MD5

00676313c8370bf67635696d48c4c4ba
SHA1

8b102f723ddd69beafed381889fb32e24e591ea5
SHA256

01e23c7bd4674f274548e3a53c5dce00f2ce2748a41420cb239972d44d7523ad
SHA512

501e536c7ec5e3257dd5bbaf7069196925bf739c4eafae6ed3c79395ae463a7a808911cd2a57f7cac8888aefb0ae34fe5de4b3a2a54b7ad8bb7c8b7733645835
SSDEEP

768:50GTLY+WT/5SsWM94Cgujn20udgIQ10GTLY+WT/5SsWM94Cgujn20udgIQ:7Y+k4sW+xn2bdgd3Y+k4sW+xn2bdgd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00676313c8370bf67635696d48c4c4ba_JaffaCakes118

Files

00676313c8370bf67635696d48c4c4ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36decc04ba70c1c8d72a9c6c6d2dc6c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

ioctlsocket
sendto
accept
GetAddressByNameW

gdi32

CombineRgn
CreateRectRgn
EnumFontFamiliesExW
CreateDIBitmap
EnumMetaFile
GetDeviceGammaRamp
GetKerningPairsW
GetObjectW
GetDCOrgEx

shell32

ShellExecuteExW
DragQueryFileW
FreeIconList
SheSetCurDrive
DuplicateIcon
StrStrA
FindExeDlgProc

Sections

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE