b2a38561450e0c3b850c3ba28a784b67_JaffaCakes118 | Triage

Sharing

General

Target

b2a38561450e0c3b850c3ba28a784b67_JaffaCakes118
Size

5KB
MD5

b2a38561450e0c3b850c3ba28a784b67
SHA1

647e331570834dd065c99a04e411e151323866d6
SHA256

be86117905bbc21d612207bf3f062ed218ecc43cdac6c1d2f357684af2ec7817
SHA512

c262b23df92a400c0e6848235b2da0c5fd2e76f36b4c9f95b0077ba7a5ed50fd1759fc91600a4708fc57e5693e1f609d0c9d8adfea5fbdb0636bbe8a99f5dd34
SSDEEP

96:+HFqcvkA9f9bHY4LoEPEmAeZqtdn6GrCr:+HkccA99iO4e0tdnvQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2a38561450e0c3b850c3ba28a784b67_JaffaCakes118

Files

b2a38561450e0c3b850c3ba28a784b67_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9206e2ed6430ba4d7370cb96887d6cea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetSystemDirectoryA
CloseHandle
CopyFileA
ReadFile
RtlUnwind
CreateFileA
SetFilePointer
WriteFile
CreateMutexA
CreateProcessA

user32

CharLowerA

advapi32

ControlService
OpenSCManagerA
OpenServiceA
RegCreateKeyA
RegCloseKey
RegSetValueExA

ws2_32

listen
htons
socket
bind
WSAStartup
recv

crtdll

__GetMainArgs
exit
memset
raise
signal
strcat
strstr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 268B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE