c287a8dff4cf35517023ef2679572536_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c287a8dff4cf35517023ef2679572536_JaffaCakes118
Size

10KB
MD5

c287a8dff4cf35517023ef2679572536
SHA1

73cadb9066c5a42911283f3af1e152535c960199
SHA256

c23e04d1f5f069a1d6655cc6ef1e9e8f181f941b70c578514bc1459b736e7327
SHA512

1ba243806cb16cce2fbac2ee6b12de8429fed9f8907505e4fa10d96b3ad908e2e692501a61f5dcc38f10149cc56d2f9a9027076e5c64e96f6d0c657ec7d5b3ad
SSDEEP

192:MyHScUuDiCWSvhE7/MMPVdkkkkJZzXibezb:arSvhE7/MM5ZzX6ev

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c287a8dff4cf35517023ef2679572536_JaffaCakes118

Files

c287a8dff4cf35517023ef2679572536_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e4b3ee072c21bdcbeb0656f364d866d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CopyFileA
DeleteFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentDirectoryA
GetLastError
GetSystemDirectoryA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fgets
fopen
fprintf
free
malloc
memset
signal
sprintf
strcat
strcpy
strlen
system

user32

MessageBoxA

wsock32

WSAStartup
connect
htons
inet_addr
send
shutdown
socket

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE