4a6f7769d0dd05a265d0b108a67b9f93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a6f7769d0dd05a265d0b108a67b9f93_JaffaCakes118
Size

43KB
MD5

4a6f7769d0dd05a265d0b108a67b9f93
SHA1

27498f260c59d85a965bd6d3150a98ac5d9e1f23
SHA256

7158c3cf4dadf769618767d6a2472c390cb780708ac6587e5b94be34425005f6
SHA512

08cce34af1daa75d4336f9278f880271c447bba67894fe9a5818ba51a80d21ed9ce20d7bff9594b0ec34d2c95622e30026a1b11bfffec0a525770460123eabf8
SSDEEP

768:bFZUzsKVHHiFXMiqNtqS1heBOS8E16rpiT4wh6JIul7QI6pWDk0oxo:bFZUz7HC9MljqSKO16g84waL7QlWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6f7769d0dd05a265d0b108a67b9f93_JaffaCakes118

Files

4a6f7769d0dd05a265d0b108a67b9f93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6efdf60df3e294438a907f9bdf3f9442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE