69480e4d7d4e7b200ae46a73e07d4a2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69480e4d7d4e7b200ae46a73e07d4a2b_JaffaCakes118
Size

5KB
MD5

69480e4d7d4e7b200ae46a73e07d4a2b
SHA1

ca9c4616d203539cc95d92686cd3d59c8ccb7e4f
SHA256

790683ec3dfcca52a59c5f8588a7353fd934d23ad8b6a36df7cc96ca2203f32c
SHA512

7ec4d72b1fd1b49a9064276c341621542b0476b72c324c2b81b6a0da9b1d1608e8c88119f2b26da4ea1704ad82fa04177c43feeeab01c2cfd3a6cce5d6083516
SSDEEP

96:Z13TEpY5b3DbqYdXousQAR06tGrm5+uQqBus56wbHicTj0DL2T9N:rTqYFXxHkGq5zPunwbHicTj22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69480e4d7d4e7b200ae46a73e07d4a2b_JaffaCakes118

Files

69480e4d7d4e7b200ae46a73e07d4a2b_JaffaCakes118
.dll windows:1 windows x86 arch:x86

8748a1c48b1a43af0c2e117390543ad4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

closesocket
connect
htons
inet_addr

kernel32

CloseHandle
CreateFileA
CreateThread
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
OpenProcess
Process32First
Process32Next
Sleep
VirtualAllocEx
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrlenA

Sections

.code
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE