833d038f20acaef465d016ef68cc05b9_JaffaCakes118 | Triage

Sharing

General

Target

833d038f20acaef465d016ef68cc05b9_JaffaCakes118
Size

7KB
MD5

833d038f20acaef465d016ef68cc05b9
SHA1

2222e26e6ba109171559d4aec5971d14e1cc1d2d
SHA256

f9362aeeccf6674016f3c2f918ab812cd27b23a36acd92b259fe5ef9245d1132
SHA512

088924957e80ad935acad4cff5eeb9f656a7ead514e2337c65b3c9679762c5fec583dd35cd55d24eba65f889250c4054616c119308c18041f28df204976fd4d5
SSDEEP

96:Boam4rcVvxqhOqpRNfNYrmk3R0M7BFweT6qglelNWk/4T2EEstLyegybWP9c86DK:M4rcVk8qpPf+jR3AkAKJ6bWlj6DK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
833d038f20acaef465d016ef68cc05b9_JaffaCakes118

Files

833d038f20acaef465d016ef68cc05b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b540c8e65f945acb0aff1c7c86b0a5eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess
lstrlenA
lstrcpynA
CreateThread
GlobalFree
GlobalAlloc

user32

wsprintfA

wsock32

socket
send
WSAStartup
closesocket
connect
gethostbyname
ioctlsocket
recv

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ