93dda7be19878d3d2a399f8c66725181_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93dda7be19878d3d2a399f8c66725181_JaffaCakes118
Size

11KB
MD5

93dda7be19878d3d2a399f8c66725181
SHA1

8a2e08188563b0df2e6ba2e8b574533646b6260a
SHA256

3451ff90ae46c7cacec8629c6a68f822a408b25d399d4fa42f0a716db8e306ca
SHA512

d2632a45cd131f411148e1be9822a26aaea622e08bb8588a806f6802b5e23e974362f5529f0a777b6a947a17154f438648cb4af39070b010d69b2ad5cf809de2
SSDEEP

192:X5GeEN41UNHx0GYm2+QiZkEOgx3h4PEF902NH8Cw9cnx+CImZJlzFqCosn5e:lEN41UHC3m2+QiZkEOgxuPEF908Y9cng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93dda7be19878d3d2a399f8c66725181_JaffaCakes118

Files

93dda7be19878d3d2a399f8c66725181_JaffaCakes118
.exe windows:4 windows x86 arch:x86

916d83d7be636135e4561b83255f9dfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetLocaleInfoA
GetTickCount
GetModuleFileNameA
CreateThread
WriteFile
SetConsoleTextAttribute
AllocConsole
GetStdHandle
ExitProcess
IsDebuggerPresent
GetProcAddress
SetProcessWorkingSetSize
GetModuleHandleA
GetComputerNameA
CloseHandle
HeapAlloc
SetThreadPriority
TerminateThread
GetProcessHeap
HeapFree
Sleep
LoadLibraryA
GetTimeFormatA

advapi32

OpenEventLogA
ClearEventLogA
CloseEventLog
GetUserNameA

msvcrt

rand
strtok
strncpy
strstr
srand
atoi
_vsnprintf
_snprintf
fclose
fread
fopen
strncat
_strcmpi

ws2_32

recv
closesocket
send
connect
socket
htons
inet_addr
accept
WSAStartup
listen
bind
gethostbyname

Sections

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE