a8021a6ca000194b9c7b6a01537daac6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8021a6ca000194b9c7b6a01537daac6_JaffaCakes118
Size

9KB
MD5

a8021a6ca000194b9c7b6a01537daac6
SHA1

14135cbc154266ab76832c1c64275cf925ac1474
SHA256

08054bee77e1c2526b1fe239550ad766b7170aff1779f7c371a7cb70ebc8ad3a
SHA512

f0f0c906b18527810276c01e38876779d6d0c73cd33f3a29c6e26f34f4172dcbf43a14bc81354c474084afe5d9fbfa1932af3c3f51172f062e237f0718d54dbf
SSDEEP

192:30Rr1OIOLiYB2cyZM/+yH3Zd2b4jm/RKRR0W4oynyWJ:30RfEnB3yZhephEW4sWJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8021a6ca000194b9c7b6a01537daac6_JaffaCakes118

Files

a8021a6ca000194b9c7b6a01537daac6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d9258b54607785f353d7567df32d538

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

gmtime
time
strncmp
rand
strchr
_strdup
atoi
_vsnprintf
realloc
strtok
malloc
_exit
_XcptFilter
strftime
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
calloc
srand
strrchr
free
strncpy
_snprintf
exit
strstr

kernel32

SystemTimeToFileTime
CreateMutexA
GetLastError
ExitProcess
GetTickCount
Sleep
GetSystemTime

ws2_32

closesocket
recv
send
connect
htons
socket
gethostbyname
gethostbyaddr
inet_addr
WSAStartup
setsockopt
__WSAFDIsSet
select
WSAGetLastError
ioctlsocket

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE