74580a0e3d386b2496de881d14312189_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74580a0e3d386b2496de881d14312189_JaffaCakes118
Size

114KB
MD5

74580a0e3d386b2496de881d14312189
SHA1

546ba962c7422c6cdc8c9c9849d7458c76767f1e
SHA256

e8b53bd1333c3cceb4432bb28252154f9cc91827cc4d65cbbfaec485aa85a403
SHA512

24feff3660783e2249b7cb87daa10bbfdf86fd651f84fcbbc5ab6ad376de07639330197d9a09f4561d5514e733f37eaeabb21fa4c2a5dd6144879cd41a883b5e
SSDEEP

1536:8Po1R4I82iMAEdG/2bKW0Vqjh0WxAnBZjz2khqp0kOjPPPSatnKLPuV0sMBKDmPj:8Po1R1hbdG+SLHhbPPKaUD20pKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74580a0e3d386b2496de881d14312189_JaffaCakes118

Files

74580a0e3d386b2496de881d14312189_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5a7c112d5968db19ac313ea71098a81e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
EnumResourceTypesA
GetModuleHandleA
FindResourceA
ExitProcess
LockResource
EnumResourceNamesA
VirtualAlloc
GetStartupInfoA

ws2_32

bind
listen
WSAStartup
WSACleanup

ole32

PropVariantChangeType
CLIPFORMAT_UserFree
CoGetObject
BindMoniker

Sections

CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 120KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ