4a745ccaac07821898ae0e999e86d811_JaffaCakes118 | Triage

Sharing

General

Target

4a745ccaac07821898ae0e999e86d811_JaffaCakes118
Size

31KB
MD5

4a745ccaac07821898ae0e999e86d811
SHA1

53faa211b557d6040599af5ab70032e1dd99b651
SHA256

d5d6e4d2223771252a84a76af71e382e7e6de68411f8f08cab859f0ca5e260aa
SHA512

3486fd2505e6089cc66c03fb233538801200b83827795f51907380c05330ba0f50e2d9de12493cd35d471a911d9f4ec121ac86d762fd8703ff7ae70329538892
SSDEEP

768:pNzZpS7PuAC+h4HfZPetCLUkZbZlLmwjLAp:pNzZOup+h4RPetCLdbZNVAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a745ccaac07821898ae0e999e86d811_JaffaCakes118

Files

4a745ccaac07821898ae0e999e86d811_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cae6dd515cec0e4ec794b559e5edbe01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

CryptHashData
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
CryptGetHashParam

kernel32

CloseHandle
CreateFileA
CreateThread
GetFileSize
GetFileTime
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
MoveFileExA
ReadFile
SetFilePointer
SetFileTime
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile
lstrcatA

user32

SendMessageA
wsprintfA

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
socket

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ