085b7c485782871dc8dc2607e959a420_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

085b7c485782871dc8dc2607e959a420_JaffaCakes118
Size

10KB
MD5

085b7c485782871dc8dc2607e959a420
SHA1

caad46df18cd0ad8da063941042d8d227bba7fc3
SHA256

e065a2a92bf4ef5ebc0ee49756f159334bed111cd15415fb745948db489c32b6
SHA512

7a1a1826d8633a990b3193f656b1502d54f52ccdb6ff6564f2a739495508c8cb7b9fdc715a25304de04443f5099b7ba136266d5d4a959919b55c66e60883f8e9
SSDEEP

192:Plab/mize45MGYSdDPWUfcS1cJ/YOXL+nIFC6XwVEw:C/S/1CDPW43kiSXwVEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085b7c485782871dc8dc2607e959a420_JaffaCakes118

Files

085b7c485782871dc8dc2607e959a420_JaffaCakes118
.exe windows:4 windows x86 arch:x86

daf8241e47cdd5b47f955f036e2485b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
atexit
atoi
exit
fprintf
fwrite
memcpy
memset
printf
puts
setbuf
signal
sprintf
strerror
strlen
toupper

ws2_32

WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_addr
inet_ntoa
ntohs
recv
select
send
socket

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE