d271bc31f4715e023a2552610fc95b07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d271bc31f4715e023a2552610fc95b07_JaffaCakes118
Size

18KB
MD5

d271bc31f4715e023a2552610fc95b07
SHA1

f4f179111bd6c224571b28ed5b02d42e1e390676
SHA256

a16512a851ff327f56d844213ea015a84945018671f71c50330bb361d928f7f2
SHA512

cfe8b3bc5d38322bc9e67cf4e07feb501392cac3cea762a84347bd9c5bfe915b19dc976d8b1a6c1df202ea69f8453b3a4aca386b50c9c9f96372a3370bb2c756
SSDEEP

384:dAVeg61ret10POcVDd9J3/yMCCtYKJbuVgpdETAgzLu2ssViuTAjG:d2J61re30P5FdP6gtYKJbuyzEHzLu7sR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d271bc31f4715e023a2552610fc95b07_JaffaCakes118

Files

d271bc31f4715e023a2552610fc95b07_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4d30e2dc544db79b6e34c5744639563a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

ZonesReInit
DllCanUnloadNow
IsAsyncMoniker
Extract
CreateAsyncBindCtx
IsValidURL
URLDownloadW

wsock32

accept
bind
htons
sethostname
WSAStartup
htonl
SetServiceA
gethostbyaddr
listen

Sections

.text
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 836B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE