187f32a9d8f92728a23c18cfc4c52b5c_JaffaCakes118 | Triage

Sharing

General

Target

187f32a9d8f92728a23c18cfc4c52b5c_JaffaCakes118
Size

5KB
MD5

187f32a9d8f92728a23c18cfc4c52b5c
SHA1

7f61490107b25a3fb236179239085d81bdd57ac1
SHA256

54d2ec3e35093c1b317b8a09e6557bf6f94dc44baa1a6eb906ae5aa559cac580
SHA512

58b97715549af09bf8e9e19a8b30dd35cfe95297e18c396fec8c9147d1899f464d7e81a3fc02d5a5ef76cfaff297c25d6f63c37c8fdba92b75135d1f637b3231
SSDEEP

96:tsAM2AQef5BpbJMLnaEEWpKse31C7tCE7:tP2QefLka4Ebm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
187f32a9d8f92728a23c18cfc4c52b5c_JaffaCakes118

Files

187f32a9d8f92728a23c18cfc4c52b5c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

891fa46bdecf2fd0c916f47474e08932

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

j:\C++Projects\suckblow\Release\suckblow.pdb

Imports

ws2_32

inet_addr
WSAStartup
connect
WSACleanup
htons
recv
socket
closesocket
send

kernel32

CreateThread
MultiByteToWideChar
HeapAlloc
HeapFree
GetProcessHeap
lstrlenW
lstrcatW
lstrcpyW
lstrlenA
OutputDebugStringW
WideCharToMultiByte

Sections

.text
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 913B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ