4a2244b4f22b7408e587c83eb439148d_JaffaCakes118 | Triage

Sharing

General

Target

4a2244b4f22b7408e587c83eb439148d_JaffaCakes118
Size

57KB
MD5

4a2244b4f22b7408e587c83eb439148d
SHA1

f379d3028299ff1ffdd7733cb813ca3e58ff428a
SHA256

a19266e0c5f4cfdeca6a576430da0bc26575155db32cd6fe31bb6500fa8e6a32
SHA512

4408d482763945c4b3bed0665fd71f8361b0783c3baba777cfbad27ba57ec2fc16a45385d05333f01784f96e6111ae8d19cd0d1bd24491a6d4b98cb049e92dc0
SSDEEP

1536:vUzd8PSmApqj7IUiaF2Ef/zeXDhbAo1Ey:vLqVFS3/zsxjEy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a2244b4f22b7408e587c83eb439148d_JaffaCakes118

Files

4a2244b4f22b7408e587c83eb439148d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

WSHAddressToString
WSHEnumProtocols
WSHGetBroadcastSockaddr
WSHGetProviderGuid
WSHGetSockaddrType
WSHGetSocketInformation
WSHGetWSAProtocolInfo
WSHGetWildcardSockaddr
WSHGetWinsockMapping
WSHIoctl
WSHJoinLeaf
WSHNotify
WSHOpenSocket
WSHOpenSocket2
WSHSetSocketInformation
WSHStringToAddress

Sections

.text
Size: 51KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE