68cada0011a22f43e5b4cbbbb1e6d1f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68cada0011a22f43e5b4cbbbb1e6d1f9_JaffaCakes118
Size

10KB
MD5

68cada0011a22f43e5b4cbbbb1e6d1f9
SHA1

47e866dd7b56d52af12693c7186022b381c0dcea
SHA256

a6c4e82346e6493a673557f3515cc31d12affed48a554a4cea5431d3470d0d26
SHA512

b73a797fd81b91f8527917a92366cf44e35c4fcf8baa876fc8060fc6cd3986f278d938fea6151057fd74a5b35c2a7445cbb090c7df94db9831b20430fc6e6fb8
SSDEEP

192:u4laDuuOmCD7VG8cg4aoEs6YcSZcJ/YOXLtPUMU/IFxXg5Ew:upuuOfVNxY3QtcN/cg5Ew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68cada0011a22f43e5b4cbbbb1e6d1f9_JaffaCakes118

Files

68cada0011a22f43e5b4cbbbb1e6d1f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb2f18b535c5be9abd001a0199c6baa0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter

msvcrt

_fstat
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
atexit
atoi
exit
fclose
fopen
fprintf
fputc
fread
free
fwrite
malloc
memcpy
memset
printf
puts
setbuf
signal
strerror
strlen
toupper

ws2_32

WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_addr
inet_ntoa
ntohs
recv
select
send
socket

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE