877ecbf7f46a160f4a2ef1d6817c5ff4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

877ecbf7f46a160f4a2ef1d6817c5ff4_JaffaCakes118
Size

28KB
MD5

877ecbf7f46a160f4a2ef1d6817c5ff4
SHA1

8af89aa674f2b607d62c90db927faa028750cbba
SHA256

7fc46ef28395e316b5318d093697ccea11263a19c9eb6cf01132bc428f2fa33d
SHA512

2bbe4856b0c562e3a0f7bae611e7ca9fe6c191a86e7bdd5db077521df3f9d29ae8a9cb5394ea407caf4e38d3078979236a18b6fa9a42515f16e84564c13205f8
SSDEEP

768:Eyt2D/AqmSvzhjyTzligpA10gLMKJJyH6hlXSDP4jP:+Yirh8AKgLMKnI6p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
877ecbf7f46a160f4a2ef1d6817c5ff4_JaffaCakes118

Files

877ecbf7f46a160f4a2ef1d6817c5ff4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0493264954cd5100c5fa796a7d50d2fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_controlfp
_cexit
_adjust_fdiv
_except_handler3
_XcptFilter
_exit
_c_exit
__setusermatherr
_initterm
__getmainargs
__initenv
_write
strchr
puts
exit

kernel32

FormatMessageA
LocalFree
GetModuleHandleA
GetLastError

user32

CharToOemBuffA

ws2_32

gethostname
WSAStartup

mswsock

s_perror

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE