3a3093f370c455fa65e672f3e87867d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a3093f370c455fa65e672f3e87867d4_JaffaCakes118
Size

6KB
MD5

3a3093f370c455fa65e672f3e87867d4
SHA1

89227a57a46906af0c3023056a9d43798650d63e
SHA256

d218536233849227331174bc4fb861f5f62e579fac6aff4e2a2f2785fb4e4a8c
SHA512

932ebf264bdec85939f8f2b2c2e830f25b165ec4fcd3d2ce008d30cad7cef2cd1f1161936ac6d262719658964011c04a68222301a296852f2f991e5966422206
SSDEEP

96:MtgZiKmkybBvuveMcWms+UF6xGxE0pFYK4hNGcAbV:MGZiKzeMFmsPF8GfniNG1b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a3093f370c455fa65e672f3e87867d4_JaffaCakes118

Files

3a3093f370c455fa65e672f3e87867d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d32cb9e6081f930e60ddf5ffb3323e51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
htons
inet_addr
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ