a2cdb9397729c30d5c40aea5104b84da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2cdb9397729c30d5c40aea5104b84da_JaffaCakes118
Size

4KB
MD5

a2cdb9397729c30d5c40aea5104b84da
SHA1

225c348fe170384bd34dcec666aec91adf0f525e
SHA256

13ffb39e3429f1d3df1cea451e272062b8a712071455aa6ce260da1d8aa7732b
SHA512

c257147af23db6a752dad4205f04e5250300fe892f7da2d92baf967a2fb7cdeae6bfc0738c5800f2ea333ea3756bf09ab3ba2994ed52d65495d3f6a44cdbc907
SSDEEP

48:KdnI21Tb9K2im6Tp9zv7XYBNHZ22gTxn3:zeTBnf6bTYU2wxn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2cdb9397729c30d5c40aea5104b84da_JaffaCakes118

Files

a2cdb9397729c30d5c40aea5104b84da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07ab9a72223bef8b92dd0a794b71876a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateThread
ExitProcess
ExitThread
GetModuleHandleA
GlobalAlloc
CreateEventA
ResetEvent
SetEvent
WaitForSingleObject
WriteFile
lstrlenA
GlobalFree
CloseHandle

gdi32

GetDeviceCaps

user32

wsprintfA
CallNextHookEx
DispatchMessageA
GetMessageA
MessageBoxA
SetWindowsHookExA
TranslateMessage
UnhookWindowsHookEx

ws2_32

WSAStartup
connect
gethostbyname
htons
send
socket
WSACleanup

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE