225aac50c63f06409f76892ab6bdaf28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

225aac50c63f06409f76892ab6bdaf28_JaffaCakes118
Size

2KB
MD5

225aac50c63f06409f76892ab6bdaf28
SHA1

c923db0c70920056c8d75f590f236b25253eb472
SHA256

2633461d1b450f00f243a4ab3e8675e5bcf76790208bbc50eeea3d87cd20b3b4
SHA512

9ab43a10f6a4ac1440fac89b54ba62b726b6f459d5d0842cafa1b385b7e1fb9685ae9b42d37130572d84ad0819d89d64aabc618a2b6cd51651e328853907bba9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225aac50c63f06409f76892ab6bdaf28_JaffaCakes118

Files

225aac50c63f06409f76892ab6bdaf28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38016d722175a1c8fdc7a27ac6351544

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSACleanup
socket
htons
sendto
closesocket

kernel32

lstrcmpiA
CreateToolhelp32Snapshot
CloseHandle
Process32Next

Sections

.text
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE