aad3f04da314d3f948ee7bb3deacbba4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aad3f04da314d3f948ee7bb3deacbba4_JaffaCakes118
Size

42KB
MD5

aad3f04da314d3f948ee7bb3deacbba4
SHA1

9c9bf3442b8f7a4823cc9e024eeffb6ee61d8910
SHA256

88e53aecb771be80972dcd8a920976a3ee256bd65ac3ed8e6813062f85fb47d5
SHA512

702713862819bba702a3b708cf3f9144072e6ce0b3fdcc11e0d9916ebcd771f0c3a494ce9e002e82588cd843352b1970da5a52e5fde4d7ac0f52243d40036a7a
SSDEEP

768:sQgGkwQrNuk+MWxZuGHzog+n3B1lj4C1mBH1bxG8upLQ5jE/lCpYgRcw:Dkh8k+tZuGHT+3BnsRVbs80Q5IQp3Rc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aad3f04da314d3f948ee7bb3deacbba4_JaffaCakes118

Files

aad3f04da314d3f948ee7bb3deacbba4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2109805714be760d19ddaba04010f4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE