c96b8a1a3ba88f7ec59e250c205037ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c96b8a1a3ba88f7ec59e250c205037ae_JaffaCakes118
Size

10KB
MD5

c96b8a1a3ba88f7ec59e250c205037ae
SHA1

d2b2befd8bbaa093b41c78b84091067141705dca
SHA256

d75eaa2d798152a2c23e00221a6ade125ab75ed07fcb47eedae50e7acc262dd1
SHA512

8576e235cacec5c01e8eb9860b8177f0432f22a941b4b5a2c9014d493e81425a8520e23be51baa7c375724a43ffa9c2531980de784201e6886da7a17d6cc4333
SSDEEP

192:Ts2EyoVLrU48y+In0FS+aa6eoe7k+eR4fF8:I2EFUc++0g+aBeoe7k+5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c96b8a1a3ba88f7ec59e250c205037ae_JaffaCakes118

Files

c96b8a1a3ba88f7ec59e250c205037ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3199ee0cab3a28732738e90f116a1ac2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strlen
strcpy
strcat
atoi
sprintf
strstr
_strnicmp
strncpy
strcmp
sscanf
memcpy
localtime
mktime

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
HeapAlloc
CreateProcessA
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
HeapFree
CreateFileA
WriteFile
Sleep
SetFileAttributesA
DeleteFileA
GetLocalTime
HeapReAlloc

shell32

ShellExecuteExA

wsock32

closesocket
WSACleanup
WSAStartup
socket
inet_addr
gethostbyname
htons
connect
ioctlsocket
send
sendto
recvfrom
recv
WSAGetLastError

winmm

timeBeginPeriod
timeEndPeriod

Sections

.code
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 245B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ