2335abdf1210e72981e81c1046c401a9_JaffaCakes118 | Triage

Sharing

General

Target

2335abdf1210e72981e81c1046c401a9_JaffaCakes118
Size

3KB
MD5

2335abdf1210e72981e81c1046c401a9
SHA1

21110cbedb21ea68eaba30cf92a85b31f380acce
SHA256

d883ed70a67e74bc7614925ab99e07a492e8c1156c7edcb3403c4e15b048f481
SHA512

740bbd965f3f7a34d920c4dafc1f9d2c6af08be93d866ab2fcdd363ec05dc0f372fee7c5f4524d4cd560dcd83985aa7d622dcb64169369aba54efc8eda8882cd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2335abdf1210e72981e81c1046c401a9_JaffaCakes118

Files

2335abdf1210e72981e81c1046c401a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a31df819ce4890d4a877abe34dcc6a0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetProcAddress
LoadLibraryA
ExitProcess
ReadFile
WriteFile
WriteProcessMemory
lstrlenA
CreateRemoteThread
OpenFile
CreateProcessA

wsock32

socket
connect
closesocket
send
gethostbyname
recv

advapi32

RegOpenKeyExA
RegSetValueExA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE