c081c5945bdbcd8caaf710dea3f057ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c081c5945bdbcd8caaf710dea3f057ac_JaffaCakes118
Size

20KB
MD5

c081c5945bdbcd8caaf710dea3f057ac
SHA1

d5f9fc350b58ce489824bf93e3442e5dc1483e31
SHA256

bf8bd0fa96d51e20e2b3f7de7263ab15119d170c6a07b6a2cd1fb84da77c60f4
SHA512

2ec890323fbfad6968b4eaddaaeee4b9802369b4e333f15820bb0a38f52530ca5ccab4463976d1d60070d6efc0142574359e05c45ec04a71148af4a38c184c49
SSDEEP

192:E9Vl/rdNDII9se+5WNfWN0EMP1oyn6gO:EXx3Dx1+2p1/O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c081c5945bdbcd8caaf710dea3f057ac_JaffaCakes118

Files

c081c5945bdbcd8caaf710dea3f057ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92ca3a82c8331259f524a07bb3bf6bc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
Sleep
GlobalAlloc
GetProcAddress
LoadLibraryA
lstrlenA
lstrcatA
GetLastError
HeapAlloc
GetProcessHeap
CloseHandle
TerminateThread
HeapFree
WaitForMultipleObjects
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA
MessageBoxA

ws2_32

WSASocketA
inet_addr
sendto
recvfrom
socket
gethostbyname
htons
connect
WSAStartup
closesocket
send
recv
setsockopt

msvcrt

memcpy
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_XcptFilter
_initterm
__getmainargs
memset
atoi
strcpy
strstr
strcat
_exit
rand
strlen
_acmdln

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE