ae511d53d2669bf37d5e78ddd250d8bd_JaffaCakes118 | Triage

Sharing

General

Target

ae511d53d2669bf37d5e78ddd250d8bd_JaffaCakes118
Size

43KB
MD5

ae511d53d2669bf37d5e78ddd250d8bd
SHA1

6d383dbcb73f05abcdbb024aee94fc8bb15d1aac
SHA256

ce9c5715133a6ba912d350d45d495f243e089851fd37579bf4c1eb942075b4ad
SHA512

4fe8b4b0f101203c17d64a64a1779a2d00256d3d9da5e168a056a5233771e2bc9db38492e4247029bb6a35295258a1092601784bfba0ec8a89fe07731594f509
SSDEEP

768:vq9UP5/2INGzRuREl+EoWDGO7SnhKtjxQrXLKRqZZK77IcrqpBbjzcdIDF:vq9UR/2IYz34ENyO7ttjYbitqpBbfcQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae511d53d2669bf37d5e78ddd250d8bd_JaffaCakes118

Files

ae511d53d2669bf37d5e78ddd250d8bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6efdf60df3e294438a907f9bdf3f9442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE