713d8a030f55240e5b22f91ab250bc02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

713d8a030f55240e5b22f91ab250bc02_JaffaCakes118
Size

49KB
MD5

713d8a030f55240e5b22f91ab250bc02
SHA1

78c2d3727787433f118213f7217112ff05df9953
SHA256

71c1293ffbb96c90b201c9472aab440e18b68fff05f699081c5ceaa5b94f33a4
SHA512

fd2fdd7f82500960e237fa7ffe2929f37652f400de94c208ad5d3b9b5b1c7596923dda9bbd9bcfd97bb2d58d8308cde927216c935dc731bfc96418e268465500
SSDEEP

1536:N6I+fcreKrqou1AEUvhS0AewGrskOXG+6QIl8:N6IrBWou1AEP0AevrdC9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
713d8a030f55240e5b22f91ab250bc02_JaffaCakes118

Files

713d8a030f55240e5b22f91ab250bc02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2def80e33554c9fa7ba605b5986c9ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 30KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ