af4b84126624b8a530528a8fd6e2ba6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af4b84126624b8a530528a8fd6e2ba6e_JaffaCakes118
Size

111KB
MD5

af4b84126624b8a530528a8fd6e2ba6e
SHA1

04d9a68ca3198c2752550d6d3e12365fabb1c6d0
SHA256

7fc2f916997290f8da2ff86821f68bb75e4e2f81bd2f372517792558c7a8446b
SHA512

a71678d9e80f95223dd94013392f1eb8f056391dd41fea9bca499328b248a72d631dfa2bacd82076160400d0d7f8ae0aa6f840d9b1a1ad4ef94d969129ab98e3
SSDEEP

3072:2ouz6bnnn8b+QRUeM5WNr/v2NSJerP3envpIn:2oxnn8hR45WNFYic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af4b84126624b8a530528a8fd6e2ba6e_JaffaCakes118

Files

af4b84126624b8a530528a8fd6e2ba6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60b861faf7b48cebe41a527dee704e69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExtCreateRegion
ExtFloodFill
FrameRgn
GdiGetDC

wsock32

WSASetLastError
WSAAsyncGetProtoByNumber
getservbyname
getsockopt
ntohs
rresvport

user32

CloseClipboard
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

msvcrt

wscanf
wprintf
wctomb
wcsxfrm
wcstoul
wcstombs

Sections

.text
Size: 63KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE