945aa910ba4adf1251d9600e12382357_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

945aa910ba4adf1251d9600e12382357_JaffaCakes118
Size

131KB
MD5

945aa910ba4adf1251d9600e12382357
SHA1

fcf107d14dab28ecbd7a9c2232bb365708b23429
SHA256

f44f1d0bd4d3c9d75fc0f9dee22b1ad50a6afde94e700c14447958019c7fa522
SHA512

79a0e904ffc02d5f1634d314f1969feade2e86b02b2a3c772ff013936f4ed72598194b0de7e49d37b8578193ee41525d4dec3681cbbd999c239981fe46093b70
SSDEEP

3072:fyrHAll9BsDMe2SGQ6ZlJfq8zMGOPyZDOmHFik:arA5aDMe2SG3ZnfD/pOmHsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
945aa910ba4adf1251d9600e12382357_JaffaCakes118

Files

945aa910ba4adf1251d9600e12382357_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a16172d7bf396c97b9559a183eb674a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

ws2_32

setsockopt

Sections

.text
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE