2640a69ca55b50a0cc22a41ff3ff1f41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2640a69ca55b50a0cc22a41ff3ff1f41_JaffaCakes118
Size

53KB
MD5

2640a69ca55b50a0cc22a41ff3ff1f41
SHA1

52e0e43f0a9c94905e27eb25771e86c0dc8046c7
SHA256

9f5913f921b9734b6ecb8d980413131375027a0d77ace4858ebfa0fabab61cb2
SHA512

4acec6251a7a7ce9b838906276b4d25590771750a7a372d2c29639abd83c009b54db84b7b88aa3df3ab71a2b5fabfeced0b12aed419aff5bc97744cc342a1823
SSDEEP

384:WdRxES+bEq+2M4N/Wx0WUMK6noLIwlsvOhKMn3NnVL3bfkt3d:AoS+bEq+kN2K4cplsWhKM3frfkt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2640a69ca55b50a0cc22a41ff3ff1f41_JaffaCakes118

Files

2640a69ca55b50a0cc22a41ff3ff1f41_JaffaCakes118
.exe windows:5 windows x86 arch:x86

11f8f2e4f2b7266576846afb4092c5ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalFree
GetLastError
Sleep
FormatMessageA

user32

CharToOemBuffA

icmp

IcmpCloseHandle
IcmpCreateFile
IcmpSendEcho2

wsock32

WSAStartup
WSACleanup
ioctlsocket
gethostbyname
gethostbyaddr
inet_addr

msvcrt

_write
__p___initenv
strtoul
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE