0751c2fc681263e9310d30a8d5c9fae1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0751c2fc681263e9310d30a8d5c9fae1_JaffaCakes118
Size

5KB
MD5

0751c2fc681263e9310d30a8d5c9fae1
SHA1

cbe62512f2a2b66934e199512cf0a4788462afe9
SHA256

5703a52941af51afec14ff974c4135b75ba3e8465b748f80be0a366cfb98f43b
SHA512

a6008d1e492deab7c357b223ecfe71b1f65c91cdc918b776993f874ed55070507338b3ad5bb11599dd60328e08a06ca3d9e9ecc47d6a99d0f4faccf3e4dbf66b
SSDEEP

48:683zNEyLFLOpPJZ/2XZDj2BqXqSYTbKUoqFE/BuYBMhWlnopi7F5zp9IUb:XJhSphAXhbUKUot/BuY2hWR4eHd9IUb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0751c2fc681263e9310d30a8d5c9fae1_JaffaCakes118

Files

0751c2fc681263e9310d30a8d5c9fae1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72d7bc92c25101d2eb5db9ecd9b7a19f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
ExitProcess
WinExec
WriteFile
lstrcatA
lstrlenA
CreateThread
CreateFileA
CopyFileA
Sleep
CloseHandle

user32

wsprintfA
FindWindowA

wininet

InternetReadFile
InternetOpenUrlA
InternetGetConnectedState
InternetCloseHandle
InternetOpenA

shell32

ShellExecuteA

wsock32

htons
send
socket
connect
closesocket
WSAStartup
WSACleanup
gethostbyname

advapi32

RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE