d3bf2b7455675e6a493fc249a4f4245b_JaffaCakes118 | Triage

Sharing

General

Target

d3bf2b7455675e6a493fc249a4f4245b_JaffaCakes118
Size

2KB
MD5

d3bf2b7455675e6a493fc249a4f4245b
SHA1

45e8f8ea2c30b155d3255a8387c1932b2177418d
SHA256

9ea00fb8dacc443a10123e076b7b8bb601634a3f2eed70a2e7f2928df4627e94
SHA512

a351de4665f3870cdf16f3b42e019469872e02e6fc366353610a1a167e8bcb5b8d9c8acb7b372ebb90478c2e2dfcd973aae25729960252af02b91eaac38d40f3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3bf2b7455675e6a493fc249a4f4245b_JaffaCakes118

Files

d3bf2b7455675e6a493fc249a4f4245b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff15cbf34ef7c5d98b78f91ca653de5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetTickCount
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
Sleep

user32

wsprintfA

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

wsock32

WSAStartup
accept
bind
closesocket
listen
socket

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE