361ccc484bf8a4e3e73e92a19bb7d6dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

361ccc484bf8a4e3e73e92a19bb7d6dc_JaffaCakes118
Size

12KB
MD5

361ccc484bf8a4e3e73e92a19bb7d6dc
SHA1

d88d398ed783efc43e77bccb67099717d4f69409
SHA256

562e5610f22b8eec4a75909a1e2bd615633a867c4ee3b4f5270f49e5878ca03f
SHA512

c9579ab435145a5fe382c48598bb336952db0c4af88f9f7ee0e42309266d0d0bf9a25e25a11902ec5cc9d5b73e206c1883f3bb51c5a19008d1f78dee3e4616ff
SSDEEP

192:8jayNmSVPyMrUuql/EQ8JE7DvvfWmpeNnvrEQcSUtJ/YOXLzKApi2h2+IFCyKcEw:aNtrNQPDvvf+136fJM+KKcEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
361ccc484bf8a4e3e73e92a19bb7d6dc_JaffaCakes118

Files

361ccc484bf8a4e3e73e92a19bb7d6dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1328ae3f9303a9e0b127a8a048f04f1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
atexit
atoi
exit
fgets
fprintf
free
fwrite
malloc
memcpy
memset
printf
puts
setbuf
signal
strerror
strlen
strncpy
toupper

ws2_32

WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_addr
inet_ntoa
ntohs
recv
select
send
socket

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE