8306cf758115d6cdab8331c448bf0cf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8306cf758115d6cdab8331c448bf0cf1_JaffaCakes118
Size

15KB
MD5

8306cf758115d6cdab8331c448bf0cf1
SHA1

93a05eca83129e8681c2bb7e3d6a741b4a02171a
SHA256

6545a4724014f5b2994e18bee7b0e7f19b1252866276c26c7577d2ba27f49632
SHA512

6eedab1fc9f0081a1b404df4f06db252184bcdc7ce6f185fe903f12ebd56cab9e31ca55ab0d2696403644b8389e178e51547c1ecd5fb7e6a289adafd7923ac02
SSDEEP

384:0p9mNNZdZu3potEfD+4VY+fbFZqc8thevry:0SN7S3M4VJX0jM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8306cf758115d6cdab8331c448bf0cf1_JaffaCakes118

Files

8306cf758115d6cdab8331c448bf0cf1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

1b51dbe324150688ce5e3a0742d34a26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

accept
htonl
SetServiceA
gethostbyaddr
listen
closesocket
bind
htons
sethostname

urlmon

ZonesReInit
DllCanUnloadNow
IsAsyncMoniker
IsValidURL
URLDownloadW
Extract
CreateAsyncBindCtx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE