eab6a28995e90af25717324836737614_JaffaCakes118 | Triage

Sharing

General

Target

eab6a28995e90af25717324836737614_JaffaCakes118
Size

86KB
MD5

eab6a28995e90af25717324836737614
SHA1

de9839233a75d19ad359d0bd879f90d32ccbe310
SHA256

5d7183052f3d7db0ba66ea0b14610a3c5ef5def33f56924b2245e9da3977bc80
SHA512

3526b61f3ecedaee1a8870622bd19233fc52f0d6c2474e9dfc45022b808a0cbef06c51c9262f2b5c3a44858d8f14973fa8adeed4a260d02b7bbff0a1a6832ae4
SSDEEP

1536:D9gZKbuAOaQBUJSgI+Kc9/86z+mQynLOn2VeUEWFqDmwzUG98kE:nb3OaQBUSAzdQEd0UEWB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eab6a28995e90af25717324836737614_JaffaCakes118

Files

eab6a28995e90af25717324836737614_JaffaCakes118
.exe windows:1 windows x86 arch:x86

fd07733f5b6a0474785f74a236806bbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
VirtualProtect
VirtualFree
Sleep
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
CloseHandle
LoadLibraryA
GetLastError

ws2_32

WSAStartup
socket
gethostbyname
setsockopt

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE