683ccc074c421c85543d756fb3237d12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

683ccc074c421c85543d756fb3237d12_JaffaCakes118
Size

3KB
MD5

683ccc074c421c85543d756fb3237d12
SHA1

856c41437e44adedec0e28e8292cceea5af267ee
SHA256

47fcb5a31ddeff3fe78f93efb84e22564c63a80a3a6b76c1141ff1810226cfc7
SHA512

6cff91b6943b8aa49092be3ddc3d60791c791ee3667aebecfe31c2b09ee2cca182486deda6fa22c29df9829ed57850db878973a0791e5dba762d000ba55fa765

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
683ccc074c421c85543d756fb3237d12_JaffaCakes118

Files

683ccc074c421c85543d756fb3237d12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e92606c3e7de3f18a170c355b16a3601

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
lstrcatA
GetProcAddress
LoadLibraryA
ExitProcess

ws2_32

gethostbyname
inet_addr
htons
WSAStartup
connect

Sections

.text
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE