a442e07bd13de2ca2b5fca9ce03c9965_JaffaCakes118 | Triage

Sharing

General

Target

a442e07bd13de2ca2b5fca9ce03c9965_JaffaCakes118
Size

16KB
MD5

a442e07bd13de2ca2b5fca9ce03c9965
SHA1

dacc41d3693589ead7548c7ba4caf73c1ec287c1
SHA256

d0e918983cdb1787c18176bacb6c687c70293d4217fa26fb6447b35f010d4970
SHA512

5ae0f939bd8b734ef9a4e86ca8f121d70c42bc25a44b460c622b4f2b06ec6f09162abc5d48253548b0db64ad343939fbae6d22a766a6987f43a4e9fbecff9983
SSDEEP

96:ZoyDcV8RM5elYvX4dzG5a45+kuOkCZxNPPh2JARjOB:+yQqRM5eaf8D4DuxCZx9ws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a442e07bd13de2ca2b5fca9ce03c9965_JaffaCakes118

Files

a442e07bd13de2ca2b5fca9ce03c9965_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54e95e086263612578c048ce648d377b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetProcessHeap
Sleep
HeapAlloc
GetCurrentProcessId
GetTickCount
TerminateThread

user32

MessageBoxA

advapi32

RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyA

shell32

ShellExecuteA

ws2_32

inet_addr
gethostbyname
sendto
setsockopt
WSASocketA
closesocket
recv
send
connect
htons
socket
WSAStartup

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE