b95e1a2e79ccb3aa5e8fdde67e54fa5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b95e1a2e79ccb3aa5e8fdde67e54fa5d_JaffaCakes118
Size

109KB
MD5

b95e1a2e79ccb3aa5e8fdde67e54fa5d
SHA1

2d21010d3df6a7c4aa6259cea4a7740bf8a0dd49
SHA256

6c4bf030f64b33bc854f1fa3fb15ad0561309c16a552c57be50208b4d76bc373
SHA512

792cdc8e8f40148c6a47bb8e14b926dc93a522599c00d4b6307ec073f5dd6514d8b9743a7e5a2d2c84b068189b8738476991a08d741528c3a7968a964ed6f8e6
SSDEEP

3072:QdaampY8whly004VFhQABCTcP9zsXZ8PbE1Vtk:QdaamNkR2ABbiJeE1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b95e1a2e79ccb3aa5e8fdde67e54fa5d_JaffaCakes118

Files

b95e1a2e79ccb3aa5e8fdde67e54fa5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c772d26c74752b56dfd0cafb7706a4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHAddToRecentDocs
StrRChrIA
StrStrIA

wsock32

WSACleanup
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SaveDC
TextOutW
SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SetDIBColorTable

Sections

.text
Size: 25KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ