73835d29ce262e1e43731b445feb5a8e_JaffaCakes118 | Triage

Sharing

General

Target

73835d29ce262e1e43731b445feb5a8e_JaffaCakes118
Size

5KB
MD5

73835d29ce262e1e43731b445feb5a8e
SHA1

6b416456ca0a7d65195f04f02aa6c70e0bb314a5
SHA256

2aeae233b0d12bde29d5e7d1db04f9e080b207bf0d80a35f196dc2edbbe26173
SHA512

dcc027ac790ffd5f2d25b6bdf74745747ccde29586f333fe3aebbecb2ae5f624e04ff56307fd2d0a514429ab9517c23673176be70d57fbe317501ff201433abc
SSDEEP

96:zl1zwSYfopqx8qOr90poG16mQdOykrkf+ykMUZZ:J55YnPQdOFof+ySZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73835d29ce262e1e43731b445feb5a8e_JaffaCakes118

Files

73835d29ce262e1e43731b445feb5a8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3b733d1c5f5899de0adafea60726ae7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
Sleep
lstrcatA
CreateThread
GlobalAlloc
GetProcAddress
LoadLibraryA
CloseHandle
DeviceIoControl
CreateFileA
GetCurrentProcessId
GetLastError
lstrlenA
HeapAlloc
GetProcessHeap
TerminateThread

user32

MessageBoxA
wsprintfA

ws2_32

gethostbyname
send
recv
closesocket
htons
WSAStartup
socket
connect

msvcrt

_ltoa
strcpy
strcat
strstr
atoi
memset

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE