5cecf3760a15f4dd79ce1766c699e921_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cecf3760a15f4dd79ce1766c699e921_JaffaCakes118
Size

14KB
MD5

5cecf3760a15f4dd79ce1766c699e921
SHA1

4ee3f61e41ad8af0ca9d02ed11e54bd2e614d16b
SHA256

5e4ac3f2657e66b0b9f086cedf86a29d30e54d94bc44ee29271e86123b16965b
SHA512

b1561e1bef1d4cd7ecfad618859c7fb5302ed530613b23c4d2941d0c2297ff6867433f93ad7fc2a93081eeb2a0a4903fe79532fa8efdc3b3c047ae6a6b360d19
SSDEEP

192:PPSra6z1Fxi8sz+o2iT//rihLa/WTLfEJ5rVo7MJnhAM4i/pIj3E3Bw074FsEcYP:Ma6not7MGRo7WRIjZa2xXjDtan+nbP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cecf3760a15f4dd79ce1766c699e921_JaffaCakes118

Files

5cecf3760a15f4dd79ce1766c699e921_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4ab34defcdd47ea229e1ca34c14c9011

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
CloseHandle
ReadFile
SetFilePointer
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
WriteFile
WriteProcessMemory
GetCurrentProcess
Sleep
GetModuleHandleA
ExitProcess
TerminateProcess
RaiseException
FlushFileBuffers
GetSystemDirectoryA
GetTickCount
GetModuleFileNameA
OutputDebugStringA

ws2_32

socket
inet_addr
closesocket
recv
htons

wininet

InternetOpenA

user32

CharUpperA

msvcrt

_strupr
_adjust_fdiv
_initterm
strchr
strrchr
free
malloc
strstr
strncpy
sprintf
_except_handler3

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ