85614a2c702aac43f5eb0a82ebc5f460_JaffaCakes118 | Triage

Sharing

General

Target

85614a2c702aac43f5eb0a82ebc5f460_JaffaCakes118
Size

43KB
MD5

85614a2c702aac43f5eb0a82ebc5f460
SHA1

ebbe876963511d3950bf7507754904d8690aa3d3
SHA256

8b1a0033f4f85b017dc2a119d7d0d96318730917d26fcf1f2497715d24cab5d4
SHA512

51f90ca501823d4724b693dd64b93cad4260335abd96640cc7c00ca0288599d4b67e2a1e24c4f035c2e319bfce115cc451704081793fda76e5aea5b67b3a4a85
SSDEEP

768:j9rX1QKF30QmbB5rd7SaFCLmhdGXpgRA/K7mS3UsXdp5:jZXNEhV5rdGaFtTGX2H35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85614a2c702aac43f5eb0a82ebc5f460_JaffaCakes118

Files

85614a2c702aac43f5eb0a82ebc5f460_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6efdf60df3e294438a907f9bdf3f9442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE