20dc9343ce1d1c734e34f26c1d897885_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20dc9343ce1d1c734e34f26c1d897885_JaffaCakes118
Size

34KB
MD5

20dc9343ce1d1c734e34f26c1d897885
SHA1

c91c50c9bdc051ad60108e666210bf0fd53674b3
SHA256

33afbcdd6b6ad47d95eb0849525eb6e04faca3f58dbe4f7e952d58379a8b8d4d
SHA512

c0bcb035c8f32a0d81f7be7d53000d22924de1489596f56dbe3302037dc766f2fb5d0abdd8844b07b2ec1b2b62eae6b95fdc6aa5f6de7c7a848eb6886c438c7e
SSDEEP

96:greTMdy6twtdbFpfArvG8eXEVMGEJBNw+oteiQL2nE4NNn2fSZ:VgdviR2je0VQJ7HWtl2fa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20dc9343ce1d1c734e34f26c1d897885_JaffaCakes118

Files

20dc9343ce1d1c734e34f26c1d897885_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04624843a73faf1fe748b798d5680ee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
gethostbyname
htons
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kgebnrh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE