7868d197367f528638ae6382426dec37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7868d197367f528638ae6382426dec37_JaffaCakes118
Size

199KB
MD5

7868d197367f528638ae6382426dec37
SHA1

008c1bdac618c4bb3bc33c12f0ce081819984dce
SHA256

0b6c8acf25623643be1b420647685231e8ae4a5dd601c0206a44700eb1890127
SHA512

3510cd900875cf08735a8725dca36a1a218b4fe85fbcbf20d63792b04a5c65a2f8ad38d514855bb8900f32ad9ff4ee9d22ea39cd76c353a17ae9f872ff5fbd3a
SSDEEP

6144:tMRg0ngAa0EHSYUGDf/gpKgqDPqK0cWtYuMcXDApO:aRrngAV5GDH+yb0ns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7868d197367f528638ae6382426dec37_JaffaCakes118

Files

7868d197367f528638ae6382426dec37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2def80e33554c9fa7ba605b5986c9ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 38KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 731KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ