aa23bf00012deceb90858419361d2b00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa23bf00012deceb90858419361d2b00_JaffaCakes118
Size

7KB
MD5

aa23bf00012deceb90858419361d2b00
SHA1

39247e62eb3a00b8d28cd9cf3c53c076ae594482
SHA256

467a733db791f5617b581dfaef1170f47fde085a182406b0e0e10ba06c67a608
SHA512

c07c96dac07b27332aaf565ddd9c0e0c058f99a1bea0cb935498492efb922ba7b8aaffb81b9846eb1ac93ab120b0b1fe9f81df37ac9249cba25e99667f7f4484
SSDEEP

12:ZbrGSGK45iwSXs1QCXNk9WTdHac3u7marS5Jnu6Pts1O9BLBNk4JA0SQ7hJ/R:ZHGSte5BT4s5Jnu6PttLB2h3sh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa23bf00012deceb90858419361d2b00_JaffaCakes118

Files

aa23bf00012deceb90858419361d2b00_JaffaCakes118
.exe windows:1 windows x86 arch:x86

59d3b4398a2c161c1a4d82284700d5bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrlenA
ExitProcess
GetComputerNameA

ws2_32

WSAStartup
socket
inet_addr
htons
connect
send
WSACleanup

Sections

.flat
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 207B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE