c915cb9ca970ca449a0bd521758de1b8_JaffaCakes118 | Triage

Sharing

General

Target

c915cb9ca970ca449a0bd521758de1b8_JaffaCakes118
Size

26KB
MD5

c915cb9ca970ca449a0bd521758de1b8
SHA1

c55d99e6f9362ec7787dd184dbfbfbdd9471b1e1
SHA256

920c2a4d9d8b4677cdb933f098e7978058af3c0bf22f29208694c295023664f2
SHA512

a9d3e0bd158e890a60923c797c6960bfcc48c1ce63c7e058283bd330dc17ac4e5e405a6d6de76ac729a19273cdc80f65c9447d7b1e35493b6d33053df29a75a6
SSDEEP

384:6y8ig9QN/WUVvQtZKSfg946BDWQYNdTPIj2nWEwYm4SUMX1Nb46uGKIZBNI5i:6y7O2Y/Ff+P1YvIancYm9R46KI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c915cb9ca970ca449a0bd521758de1b8_JaffaCakes118

Files

c915cb9ca970ca449a0bd521758de1b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

029a2ed68fd773b10a828c7d160e6f29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
ExitProcess

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

shell32

SHAppBarMessage
StrRChrIW
StrStrIW

Sections

.flat
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE