3ac2ff3003d67d57c1562f479e498937_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ac2ff3003d67d57c1562f479e498937_JaffaCakes118
Size

8KB
MD5

3ac2ff3003d67d57c1562f479e498937
SHA1

7c23f4c2cc211350c3aa626d39dc6c18553d32b1
SHA256

b63dd52601a2cd6fc9ee5574b719aba29da4824ce9ebacc8a99a2ee0142ce15c
SHA512

e05b9824fad3cbbaee851dfe11b117e9fdcb040a28442be88cf765f8aa7ba5d72faec884f3bdc73fc9632c0451ec4e04d5731775f6a0ff15056a3f4e42d8ec4e
SSDEEP

96:Z13OiIE3zmvuCh8KgUoUpqdkI1nneqrd1LyqUIYOFHyqhuFO:yRE6mCh8DmpqdkI9dxJbFHyguF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ac2ff3003d67d57c1562f479e498937_JaffaCakes118

Files

3ac2ff3003d67d57c1562f479e498937_JaffaCakes118
.exe windows:1 windows x86 arch:x86

65c1c0703587a707ead5f7c0582edc2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrcpynA
lstrcatA
lstrcmpA
lstrlenA
GetTickCount
Sleep
CreateFileA
WriteFile
CloseHandle
CreateProcessA
CreateThread
GetExitCodeThread
TerminateThread
GetSystemDirectoryA
ExitProcess

ws2_32

WSAStartup
socket
inet_addr
htons
connect
recv
send
WSACleanup

user32

CharLowerBuffA
MessageBoxA
GetAsyncKeyState

advapi32

GetUserNameA

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

Sections

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE