59b65a28d10d222463855cb0ee5eacea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59b65a28d10d222463855cb0ee5eacea_JaffaCakes118
Size

6KB
MD5

59b65a28d10d222463855cb0ee5eacea
SHA1

97b6eb48f132921381badf4acec3e408e81c2df2
SHA256

7e618ed4ec0296a560671599693d012bd688c8081793b7adbaa5c3ee51e695c8
SHA512

9f2b78053931618bb9cf833af19a3620a0b1df2bc7237c0778dd035c2c0cd38b9e5cb80856ede03a6b4495c3cb27fcd81985a2813b3743c51001a7e29ece7aed
SSDEEP

96:lvJqb8TaNrNOAooreAtTCPKy5SxTS2SyiZT:lv0b8TalNIMtTCPZ5KDWZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59b65a28d10d222463855cb0ee5eacea_JaffaCakes118

Files

59b65a28d10d222463855cb0ee5eacea_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d8383c4579df7670321554b2b1351667

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
inet_addr
WSAGetLastError
connect
ioctlsocket
htons
recv
socket
closesocket
gethostbyname
WSAStartup
send

kernel32

LocalFree
LocalAlloc
Sleep
GetTickCount
lstrlenA
CreateThread

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ