369b5a39dc9fb50d483ca1deaca678fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

369b5a39dc9fb50d483ca1deaca678fb_JaffaCakes118
Size

7KB
MD5

369b5a39dc9fb50d483ca1deaca678fb
SHA1

04bc6002e6df614d0ef73568b61421aa050dcfa2
SHA256

05da721c1a27203b732b4ab552b12aac28a03a45b66a86e3ae16654563763085
SHA512

675b6de9a07f31c477c7ac37b85772a6c5198f2af1d374e82fdd2ef47fff56315ba391c353ef0f1283fb5298613d7a9f16ec4c90a5baffe3c5aad3718ef944c6
SSDEEP

96:J0lbTBjlB6dCDH+yw3E1XY2eN7KDVAjUuN4qljUGb5K:mlbH91eEhe5FN4qZBb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
369b5a39dc9fb50d483ca1deaca678fb_JaffaCakes118

Files

369b5a39dc9fb50d483ca1deaca678fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

576057dc03723b6eec858d9b4b496df2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVolumeInformationA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__set_app_type
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
atexit
atol
fclose
fopen
fwrite
getenv
memset
rand
signal
sprintf
srand
sscanf
strncpy
strstr
strtok
time

shell32

ShellExecuteA

wsock32

WSACleanup
WSAStartup
closesocket
connect
gethostbyaddr
gethostbyname
getservbyname
htons
inet_addr
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 64B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE