9fd333bc50cc65a66822d9842e2f71ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fd333bc50cc65a66822d9842e2f71ec_JaffaCakes118
Size

16KB
MD5

9fd333bc50cc65a66822d9842e2f71ec
SHA1

c7f6f7f34b876b2fc4de46aa334ff2b870850678
SHA256

c661b3387ff28f6ff890abc9206f42fdf708a74cddc3d57090f2fc99c70180ef
SHA512

2099124b3515dc4e9ed39be2cec3008635e3fa9e94d002232eb0488147b899315b5fa0fef7820c6046defb6e289fa2229fa629037a014a2ae0cf24616aab48a9
SSDEEP

192:s9YnD66AlVc3cXgBtdxo63PCPx5GEAOHghoPq2Qeo:XD66AlVcMXgTdxiXGv1oo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fd333bc50cc65a66822d9842e2f71ec_JaffaCakes118

Files

9fd333bc50cc65a66822d9842e2f71ec_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d93bfde17a1898d34f723da755461152

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

ws2_32

WSACleanup
inet_addr
htons
socket
connect
closesocket
WSAStartup
recv

crtdll

__GetMainArgs
abort
exit
getchar
malloc
memcpy
printf
raise
signal
sprintf

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 776B - Virtual size: 776B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE