1b6f246f6b675ffa9a308c2439d18448_JaffaCakes118 | Triage

Sharing

General

Target

1b6f246f6b675ffa9a308c2439d18448_JaffaCakes118
Size

111KB
MD5

1b6f246f6b675ffa9a308c2439d18448
SHA1

d5fa2110c53c3ec4366bf3ca0425a6776c95c83c
SHA256

e53ed1b05af40911c9bc748c264e9506e3aec6f63827815292e09c848b071cf5
SHA512

70b9e8775061b4451ff5d86ef6875baa9674eb49d85ee77912a08a3826b1a45184e88a36a36eaf145f96035b00f06abc62656d3757fabc722644daa215ba087a
SSDEEP

3072:CGh6H/GY5XUMkAC1wGMTPqPOkl3xjstvOZmaU/:HAH/pLvDPqP1hlstl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b6f246f6b675ffa9a308c2439d18448_JaffaCakes118

Files

1b6f246f6b675ffa9a308c2439d18448_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e88d6cdaab2c88cbc2c8a1d30e231a67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr

kernel32

GetProcAddress
GetModuleHandleA

Sections

.text
Size: - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE