434e28cad7c99b234228850bbf611be5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

434e28cad7c99b234228850bbf611be5_JaffaCakes118
Size

39KB
MD5

434e28cad7c99b234228850bbf611be5
SHA1

b3542ecac425a5b20b920b288a7ac0c5636ee93b
SHA256

33ea359be83d05fe7a632a3f53da297970c692bca80f2df4980675863bf3e5d9
SHA512

46110722899d8d49caaa2b34789e41e9b58b87d674c8ce73d6c46fa19243a88ad85f5310c15bfb987086c99211a447ea4a08882aae11da5d32c4d21c8b336e71
SSDEEP

768:5FZa8MrtbPI087EnY9FnEWZCYRoligGu0xI7LJYahQ9mKKjgL+cwX:5Fw8MrtE0hY9FvZCY2lxNiQJYZ9m1UL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
434e28cad7c99b234228850bbf611be5_JaffaCakes118

Files

434e28cad7c99b234228850bbf611be5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2109805714be760d19ddaba04010f4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE