661a5ee8b759c6c6087985e2b751e132_JaffaCakes118 | Triage

Sharing

General

Target

661a5ee8b759c6c6087985e2b751e132_JaffaCakes118
Size

1KB
MD5

661a5ee8b759c6c6087985e2b751e132
SHA1

655110f5b692710c9a1a450ede4f1c8ebcbd5353
SHA256

850f5d9e40012dda2b33243ef81ef61f00b87c8cad7ff98098e1220970dca589
SHA512

deb4d13c8ae8b2b3b1a214aa4598117f740c813846e5523d4dae6aa8daa08c9b12e948af0e8ee6919e2ec4b44da5ca870fa61e9edfffdb9e43c5f66bb0d343e2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661a5ee8b759c6c6087985e2b751e132_JaffaCakes118

Files

661a5ee8b759c6c6087985e2b751e132_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f6755cad26b7b1d52db00db382cc530

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
lstrcmpA
GetModuleFileNameA
WinExec
GetWindowsDirectoryA
CreateProcessA
Sleep
lstrcatA

advapi32

RegOpenKeyExA
RegSetValueExA

ws2_32

htons
WSASocketA
WSAStartup
connect
inet_addr
gethostbyname

msvcrt

exit

Sections

.text
Size: 473B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 496B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE