88c82741aee9dfb8466852b0b6f1d3ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88c82741aee9dfb8466852b0b6f1d3ad_JaffaCakes118
Size

33KB
MD5

88c82741aee9dfb8466852b0b6f1d3ad
SHA1

65ad94df56dbcb531cbf1f577fb93ec5322fe50a
SHA256

5a76500c32a5fded543dc3568d3d6eab892b61420e70cc4f820c476214fbb0a3
SHA512

0276010e80fb7f60e5264a5e8aaee4643fb66577301b27aa179fa36d61477abfd1940195bba464db01ec3ac629a5d3a57c7d7fa60d2101d218b56ee463d3ca74
SSDEEP

768:qAKM/VXEeim4zjLm3cjWIyEFb6cc8BC93d2zwWo//UKM:fVUeim4rm39IZFbQuCtd2ro//DM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88c82741aee9dfb8466852b0b6f1d3ad_JaffaCakes118

Files

88c82741aee9dfb8466852b0b6f1d3ad_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e5031d5ae994f013aaf22fd120729d4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

CreateAsyncBindCtx
DllCanUnloadNow
Extract
IsAsyncMoniker
IsValidURL
URLDownloadW
ZonesReInit

wsock32

gethostbyaddr
listen
WSACleanup
sethostname
WSAGetLastError
accept
bind

Sections

.text
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE