b504738b2b064ab1570bbb2b09e14cc8_JaffaCakes118 | Triage

Sharing

General

Target

b504738b2b064ab1570bbb2b09e14cc8_JaffaCakes118
Size

7KB
MD5

b504738b2b064ab1570bbb2b09e14cc8
SHA1

4694829404b086088abb8f2e73ccf054bdb54a22
SHA256

1d1e4ac980f7105bea7448d8e82a095a654824467a890b760591c1b3b07a5616
SHA512

66e01057ed02c9db0adc46df9e3c6dd085aca8cb734097298e9835d8b24093d13039e43afbc16ed5d2c2bc00134dde3995c297df2f4c7236c1ece5b301c3ab78
SSDEEP

96:gRvc2X96r8aHOony3m/LXDovDpG6GK2E4x8CY0LewhNGc2nE8xzw96Qi:Uxt6YYOXUypGvK2deCY03NGtNxzwXi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b504738b2b064ab1570bbb2b09e14cc8_JaffaCakes118

Files

b504738b2b064ab1570bbb2b09e14cc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04624843a73faf1fe748b798d5680ee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
gethostbyname
htons
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ