b76dff5c11b5aa53013dbd602fb30365_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b76dff5c11b5aa53013dbd602fb30365_JaffaCakes118
Size

244KB
MD5

b76dff5c11b5aa53013dbd602fb30365
SHA1

c2c90611571a3e10101b215b90e50a534f81e6ab
SHA256

6d20efbe64bb405e615c02c58226779d8bef538a1230284a19704acba9b12a5f
SHA512

f4cc7ec07b1b71f8b946319587caba7ae5360d38355747206ef607e9c041efed75a3f7e72dd565d4583e5b7e1c458336cbf1b9542facfc8dbe2ec825a5a3f5fd
SSDEEP

6144:1ObQNzpmP4gv0vodRCgd9DSuqFZvBn5P25:Uo4PuwvzslZn5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b76dff5c11b5aa53013dbd602fb30365_JaffaCakes118

Files

b76dff5c11b5aa53013dbd602fb30365_JaffaCakes118
.exe windows:6 windows x86 arch:x86

6fd2cb86d27c28b5dc715d82a2ce2342

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetModuleHandleA
GetProcAddress
GetCPInfo

user32

MessageBoxA
GetDlgItem

wsock32

socket

gdi32

GetTextMetricsA

advapi32

StartServiceCtrlDispatcherA

shell32

Shell_NotifyIconA

netapi32

Netbios

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE