b4eb18173ba98f10d4c57b91a76c0dff_JaffaCakes118 | Triage

Sharing

General

Target

b4eb18173ba98f10d4c57b91a76c0dff_JaffaCakes118
Size

16KB
MD5

b4eb18173ba98f10d4c57b91a76c0dff
SHA1

dd420ac9885f4cf723d869644236f0d70f0b0879
SHA256

5ab8da304828a71337fbe421e3c45dcf4041c4fb91359b0733339701d7f8b597
SHA512

7199dacc44eca1e39ca2b8385514c3a646dc5d045a49b0a2efc2c3c43dbf54f380138025c1609442d9e80ca572e6e79a103de2bd2496c59f21dd2d06840cf5fb
SSDEEP

96:srW6Yy4Yc6ULzJZ1Q/XvdzcJCoG3kqkCZ7eCPPh2JARjO:s+y4J6+zJZavZeCofNCZ64Qs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4eb18173ba98f10d4c57b91a76c0dff_JaffaCakes118

Files

b4eb18173ba98f10d4c57b91a76c0dff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d3e33ed22e5a1299a57849e9a48c865

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
TerminateThread
GetProcessHeap
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetCurrentProcessId
GetTickCount
CopyFileA
Sleep

user32

MessageBoxA

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueExA
RegDeleteKeyA

shell32

ShellExecuteA

ws2_32

inet_addr
gethostbyname
sendto
setsockopt
WSASocketA
closesocket
recv
send
connect
htons
socket
WSAStartup

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE