5ea066c7fc5cc03c437c4056a55c21f0_JaffaCakes118 | Triage

Sharing

General

Target

5ea066c7fc5cc03c437c4056a55c21f0_JaffaCakes118
Size

3KB
MD5

5ea066c7fc5cc03c437c4056a55c21f0
SHA1

4e39f1d197367028b8394db3864d3efe259981fc
SHA256

eaced6c2c1f70a2b60a3810609cad256be666153bf7d49c66d78d8c8f1805692
SHA512

bcd4e71a9d7df65b7e1daa38cebcbc343d16a7190167461db454ebc37d8ee8f1d4b9bb64974605c4ceb1886ecfb192a890a844a894a22801e4afb27e87f97500

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ea066c7fc5cc03c437c4056a55c21f0_JaffaCakes118

Files

5ea066c7fc5cc03c437c4056a55c21f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

983656b2a093273b72b7ca775435518b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
ExitProcess
GetEnvironmentVariableA
GetFileSize
GetProcAddress
LoadLibraryA
OpenFile
ReadFile
WriteFile
WriteProcessMemory
lstrlenA

wsock32

gethostbyname
socket
connect
send
recv
closesocket

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE