2304a640b83bbc8f5e82735672fc281f_JaffaCakes118 | Triage

Sharing

General

Target

2304a640b83bbc8f5e82735672fc281f_JaffaCakes118
Size

24KB
MD5

2304a640b83bbc8f5e82735672fc281f
SHA1

9d808df64ae309e196b13971b3431065bf98a2f1
SHA256

47bf6a02c126e3f81aa7f63f8697f0d3cf5e8705f0eeed29104c7c7bd92a1f64
SHA512

b161883f1c7695ef9f6375e62c5936ccfd0ddeb41010e59f4545216d7794622d9da6468da5cfafa9c3304767b7bbd76677e65c1d68e1213ed5e9f07b3017b639
SSDEEP

768:2LkbKtcPya3KuuKPYveI7qZ0vn9DoYGbK:BwdMzev5GbK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2304a640b83bbc8f5e82735672fc281f_JaffaCakes118

Files

2304a640b83bbc8f5e82735672fc281f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

20c5398890dadf44902342d7dcef6c32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

GetNameByTypeW
htons
shutdown
socket
WEP
WSARecvEx
NPLoadNameSpaces

urlmon

WriteHitLogging
CopyBindInfo
URLDownloadW
CoInstall
AsyncGetClassBits
RegisterFormatEnumerator
GetClassURL

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE