73f3460ded4a96a0a24e06b146f19b0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73f3460ded4a96a0a24e06b146f19b0b_JaffaCakes118
Size

80KB
MD5

73f3460ded4a96a0a24e06b146f19b0b
SHA1

2ef02661380e5eeef19be1f939030f0a4b381c48
SHA256

f2ecdaeb91af71fa0536eef9b2cb0b3d094e851fb66f8a6d39201ec786ab9c7d
SHA512

1db0386524b39f35d4a3a593ada8e0b2f7953f3660186d2b58770ed5397df9a8f86f0f77a55a411bb84e8de583c63373ba2b04641fb4e62b99a03ec88c3b4395
SSDEEP

1536:za+UrI0y5hy+u2ttSUAXgZ7hIOOnToIfV:zrUrIXy+uotSEZ7LqTBfV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73f3460ded4a96a0a24e06b146f19b0b_JaffaCakes118

Files

73f3460ded4a96a0a24e06b146f19b0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d41f6dec2d6c410b431d12241ca0d99f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
bind
listen
accept
inet_addr
gethostbyname
htons
connect
closesocket
socket
send
recv

shlwapi

wnsprintfA
StrStrIA
StrStrA

advapi32

CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
CryptGenKey
CryptExportKey

kernel32

CreateMutexA
CreateThread
ExitThread
FileTimeToSystemTime
GetLastError
CloseHandle
Sleep
ExitProcess
GetTickCount
HeapFree
IsBadWritePtr
TerminateThread
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
GetProcessHeap
lstrlenA
HeapAlloc
HeapReAlloc

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ