6888b7918f53617a214b03e3660513aa_JaffaCakes118 | Triage

Sharing

General

Target

6888b7918f53617a214b03e3660513aa_JaffaCakes118
Size

3KB
MD5

6888b7918f53617a214b03e3660513aa
SHA1

719551c641d14859472bb2b5ee418c07d24e6ecc
SHA256

dd7a74052a8d4812eb339e208d192d7caff7651b467bee3021e61219470696ae
SHA512

508a0db0f9d67e8e7e0093242555165db2197f61493d83e12d7118963bfa425da5b72935903961fd829dd329b1e3dfa7ab911f73ca181e31b1b852d6d950b174

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6888b7918f53617a214b03e3660513aa_JaffaCakes118

Files

6888b7918f53617a214b03e3660513aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a31df819ce4890d4a877abe34dcc6a0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetProcAddress
LoadLibraryA
ExitProcess
ReadFile
WriteFile
WriteProcessMemory
lstrlenA
CreateRemoteThread
OpenFile
CreateProcessA

wsock32

socket
connect
closesocket
send
gethostbyname
recv

advapi32

RegOpenKeyExA
RegSetValueExA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE