a7b8063a0bad68f0ff78396824473fa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7b8063a0bad68f0ff78396824473fa1_JaffaCakes118
Size

2KB
MD5

a7b8063a0bad68f0ff78396824473fa1
SHA1

94fe20d2fbd6659b8ce6c5ce3468b0bb6449d676
SHA256

8c2deee401dee319716145d2b328c6e99153c19e5275f3205a524b498b8697ac
SHA512

aa35be65557f7d8e7dce7b6b33310037febbf30f34eed90d53825847d4d0af2a4859bae94cd6752f1b86362547721326ecc34a8583ce0f73dc50d7bb2d4cb377

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7b8063a0bad68f0ff78396824473fa1_JaffaCakes118

Files

a7b8063a0bad68f0ff78396824473fa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

434c1915d1b9264128b011d3a449ce1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
ExitProcess
GetCommandLineA
GetCurrentThread
GetEnvironmentVariableA
GetProcAddress
GetTickCount
LoadLibraryA
OpenFile
OpenMutexA
SetThreadPriority
Sleep
WinExec
WriteFile

wsock32

send
socket
recv
gethostbyname
connect

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE