601c0ef6f61f2d70a5965d43d4c1d3cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

601c0ef6f61f2d70a5965d43d4c1d3cb_JaffaCakes118
Size

115KB
MD5

601c0ef6f61f2d70a5965d43d4c1d3cb
SHA1

48cf500577ecdf743f4b49f3ab73ed5cf76a45bd
SHA256

45257a96a334cd468e6387292daae037067763bd046022d02e4d3e6b21741520
SHA512

8810c181a6651a437273a7be739e5824598e15ef2f33261b21ab41e958239d8442c6d34ec791814b28e2330de7f17b51db413d36175ea20be7a0fc239d0f539c
SSDEEP

3072:pHjS7UASIgEjIpUe9gU+cfURDt1UBeKQ9DsW7U:VZxUe2Uu5bK4sW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
601c0ef6f61f2d70a5965d43d4c1d3cb_JaffaCakes118

Files

601c0ef6f61f2d70a5965d43d4c1d3cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6991844e257f9ce2b2816dd31587c4da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
MessageBoxA
LoadIconA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA

kernel32

LoadResource
lstrlenA
lstrcpyA
lstrcatA
WriteFile
UnmapViewOfFile
SizeofResource
RtlZeroMemory
MapViewOfFile
LockResource
CloseHandle
CreateFileA
CreateFileMappingA
CreateProcessA
CreateThread
ExitProcess
FindResourceA
GetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA
GlobalAlloc
GlobalFree

wsock32

WSACleanup
WSAStartup
accept
bind
closesocket
htons
listen
recv
send
socket

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ