bb9a751ed9a78b0be3786c29ae11514d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb9a751ed9a78b0be3786c29ae11514d_JaffaCakes118
Size

28KB
MD5

bb9a751ed9a78b0be3786c29ae11514d
SHA1

d66c152a9db43187a3d6787b1ec953335da62e3b
SHA256

490a1e6d81b6ead4fd9faaf6d0b1e9d08cd23b1ecee9c3e32dadb36b3377549c
SHA512

18a76ceb9bece2966795d30b9e0ccfd8a78411bdaa3ca1772cccb8c544a4ef8a3d7bb46c37ae8dd2dda11258dcd8eb218ee51dc3b96281a1da809354a6d6336d
SSDEEP

768:Z09ybQiwqBem9+MZ1HukefLOoBHwqLCz8T:OKC6+g1ONfioRwCCzu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb9a751ed9a78b0be3786c29ae11514d_JaffaCakes118

Files

bb9a751ed9a78b0be3786c29ae11514d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd1283de6bb33d677c508a5f051dc414

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DllRegisterServer
InternalExtractIconListA
DAD_DragMove
CheckEscapesA
IsLFNDrive
OpenRegStream
Options_RunDLLW

user32

CreateDialogParamA
CheckDlgButton
AnyPopup

wsock32

WSAAsyncGetProtoByNumber
__WSAFDIsSet
s_perror
ioctlsocket
TransmitFile
AcceptEx
shutdown
recvfrom
GetTypeByNameA

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE