a0a06ac054c2c14e1c4d4595cb4467a4_JaffaCakes118 | Triage

Sharing

General

Target

a0a06ac054c2c14e1c4d4595cb4467a4_JaffaCakes118
Size

12KB
MD5

a0a06ac054c2c14e1c4d4595cb4467a4
SHA1

89bbcac699668dd2cd5f92d165d6be296fc1dda6
SHA256

032147c3494f8ffa00a14185149648a3b7142959e07be9a498bd1b5c044eb77c
SHA512

f1c7d707fbcbfbb0c2c38e0323c504f648e7f354b657d19b6a2ae9bf50d1b3d3fc8f817d20bcbba03519d1024818782ba5e756605eb987d83945fe32b5bc3df4
SSDEEP

192:IBH7py/J5YVnRan+NTH1Z9LvWNY7x/bbyh6cs4M4guzuhQP1oynvWLQxb:ety/J5tn+NTHP9LYYNzechZhhG1RIOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0a06ac054c2c14e1c4d4595cb4467a4_JaffaCakes118

Files

a0a06ac054c2c14e1c4d4595cb4467a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86aba8b76c5520fe34295b22932575c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
GetTickCount
TerminateProcess
ReadFile
WriteFile
WaitForSingleObject
PeekNamedPipe
CreateProcessA
CloseHandle
CreatePipe
GetDriveTypeA
Sleep
GetLastError
CreateFileA
DeleteFileA
SetFilePointer
CopyFileA
GetEnvironmentVariableA
GetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA

ws2_32

gethostname
send
select
__WSAFDIsSet
WSASetLastError
recv
setsockopt
socket
htons
closesocket
bind
WSAStartup
WSACleanup
connect
gethostbyname
inet_addr

msvcrt

_stricmp
strcpy
sprintf
strcat
_controlfp
_except_handler3
__set_app_type
__p__fmode
_strnicmp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
rand
atoi
strlen
exit
_strupr
memset
_exit
_XcptFilter

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE