860ed6794a0118e6198182f0f84c4dfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

860ed6794a0118e6198182f0f84c4dfa_JaffaCakes118
Size

3KB
MD5

860ed6794a0118e6198182f0f84c4dfa
SHA1

989459d1e63aaeae942ff56af6bf26d77748da62
SHA256

214095a8ccc99c295646603d4fdaeea65efde78d9d6305c85fab0fbe4a8c5ec7
SHA512

78511e959d9b90463d1e35e4d0ad826659a2c44a3d26c1f07b148e7d462efc8283cafcec0ed3c2e28367d1dbdbd47dec469a86559accc57d6eea702b53ebb2f6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
860ed6794a0118e6198182f0f84c4dfa_JaffaCakes118

Files

860ed6794a0118e6198182f0f84c4dfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adc5d354cd1338cddbf2d3ddeec53294

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
ExitProcess
GetCommandLineA
GetCurrentThread
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
OpenFile
OpenMutexA
SetThreadPriority
Sleep
WinExec
WriteFile

wsock32

send
socket
recv
gethostbyname
connect

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE