adac3dc7362574977c3497bc0dc4a9ee_JaffaCakes118 | Triage

Sharing

General

Target

adac3dc7362574977c3497bc0dc4a9ee_JaffaCakes118
Size

3KB
MD5

adac3dc7362574977c3497bc0dc4a9ee
SHA1

8086e58d6f80b867d95c47173f2720e5275f770d
SHA256

ca3626521b21a1dee3ac261dd7397243b1e88cbb1d03a22879d3681267622999
SHA512

ddbdd76858c68e05bc45db3bce686d0fe4f2cb187d508926b167d1212b4bc3c96e508e7aad2141b9327941e40d9f6c093cfb143eb1b9db2cabf21eb0c9d22e7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adac3dc7362574977c3497bc0dc4a9ee_JaffaCakes118

Files

adac3dc7362574977c3497bc0dc4a9ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35d1a8bdcd74e1735874df5af9851a80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
ExitProcess
ExitThread
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
OpenProcess
VirtualAllocEx
VirtualFreeEx
WriteProcessMemory
lstrlenA

user32

FindWindowA
GetWindowThreadProcessId
MessageBoxA

wsock32

connect
htons
inet_addr
send
socket
WSAStartup

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ