b3cdee65594eee90dbd2c1d6c406e08b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3cdee65594eee90dbd2c1d6c406e08b_JaffaCakes118
Size

2KB
MD5

b3cdee65594eee90dbd2c1d6c406e08b
SHA1

1a5b0311fdc515bc9b9b0102161d0103306f4386
SHA256

50428108f60fcca7e997bef4c41b4002ce27a4f15e14c21d3c839101f89b7770
SHA512

213b0669680811b8e2a930dc4c8107ffafa13e3105fe5d8c7ffc84f5f12057198a4e7a68a882b1a56a9f7aa6b27d6ea61138dd5fbea7fc5b727707e6c25e5dd5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3cdee65594eee90dbd2c1d6c406e08b_JaffaCakes118

Files

b3cdee65594eee90dbd2c1d6c406e08b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

aa9d8f89d1cc7409f553f81fe82ab38f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
CreateThread
ExitProcess
GetLastError
Sleep
WinExec
lstrcpyA

user32

wsprintfA

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

ws2_32

closesocket
connect
inet_addr
socket

Sections

.flat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE