da523780940d986ad4e13216d3c2960f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da523780940d986ad4e13216d3c2960f_JaffaCakes118
Size

11KB
MD5

da523780940d986ad4e13216d3c2960f
SHA1

c4939200539670bd6d1a5160ca4406acb409ccd5
SHA256

175e2dc3ce5fed2b2bb274f419860e97c8f439912cdfbe6799eea0ea6ad132e1
SHA512

7689d8426ad17f8e7ea0bb220fbc4cfdd65598b77cfdd2e7513dd056666702dfb5edc9c78d020f3949cfcdb3e628dcade138fe5233c9fed7afcce5e4efb48213
SSDEEP

192:DiILzFjEpev4SIa+eTQYhgPL74S5eHs0DG9gkzzZL3CDCaY:D5EwASIa+nYmPL74ie7kfZLKCaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da523780940d986ad4e13216d3c2960f_JaffaCakes118

Files

da523780940d986ad4e13216d3c2960f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d53a0ce5862737a36ab7d3749399b2a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
atoi
exit
fprintf
free
fwrite
malloc
printf
puts
setbuf
signal
strchr
strerror
strstr

ws2_32

WSAGetLastError
WSAStartup
closesocket
gethostbyname
htons
inet_addr
inet_ntoa
recvfrom
select
sendto
socket

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lamecryp
Size: 31B - Virtual size: 31B