d2abb99e771c833c3cf823f75ca2e620_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2abb99e771c833c3cf823f75ca2e620_JaffaCakes118
Size

7KB
MD5

d2abb99e771c833c3cf823f75ca2e620
SHA1

beb0c5ffdc93cf7bf515f432e2f0e6677279e435
SHA256

adb3245ebdbb440a03be23a92ad4316e9785891b92f4738a197176ca5717ecf8
SHA512

97d8efa07cfe76a1d97d4fdd1dc623dafff877d5623f77b1e3e1e08bccdf54126bdf64592de2b2f42df48d95bf07fb2705c8736d40e27c192318d1c2dac0f33b
SSDEEP

96:5aY0GjN8GFlnOOWvYO3tIT+MNEg731qAPLeK4hNGcy+uWn:kYhjBZT+CV1qAPLcNGfWn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2abb99e771c833c3cf823f75ca2e620_JaffaCakes118

Files

d2abb99e771c833c3cf823f75ca2e620_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d32cb9e6081f930e60ddf5ffb3323e51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
htons
inet_addr
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ