b6b63c55d78acaaabf12b5e9ce206f42_JaffaCakes118 | Triage

Sharing

General

Target

b6b63c55d78acaaabf12b5e9ce206f42_JaffaCakes118
Size

38KB
MD5

b6b63c55d78acaaabf12b5e9ce206f42
SHA1

c4e93a36eca2bd4413ff6b566afa20a5ba199254
SHA256

d56dfb57ecf5e430afbe64c27a23234be41aa8e2d4ef3ccf7fc35db17eafc310
SHA512

40fbcf8d325c66792cc27e09170fa762583188d80c0ce2368a8a0d37f58bce967bd7e7bf30411bdc683aedf66c7cd558f206fb53c738940e8fabec762a57eddc
SSDEEP

768:Ehz5jSTPjGZ6/v1vNnKbgOrKRULpppihXGfKy:EhzZSnGZmvNnR5mpppihgX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6b63c55d78acaaabf12b5e9ce206f42_JaffaCakes118

Files

b6b63c55d78acaaabf12b5e9ce206f42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3cc90bf118e04818b8c6660a4c0068c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_snprintf
sprintf
printf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
strlen
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
free
_snwprintf
memset
malloc
strcpy
strcat
wcscpy
atoi
strcmp
strstr
fopen
fclose
_initterm
atol

kernel32

SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
Sleep
SetLastError
GetModuleHandleA
GetProcAddress
GetLastError
GetStartupInfoA

ws2_32

send
socket
closesocket

user32

MessageBoxA
FindWindowA
GetClassNameA
IsZoomed

shell32

SHGetSpecialFolderPathW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ