eede2e80a2eddbd73ebaeeb852f14f6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eede2e80a2eddbd73ebaeeb852f14f6f_JaffaCakes118
Size

24KB
MD5

eede2e80a2eddbd73ebaeeb852f14f6f
SHA1

509fbde509fb238b9e2c2b945b9bcd67ea5b5b47
SHA256

4266dd123e0d027801262b816b41a380e02233c1566ab991c8858a823595e82e
SHA512

cf2a3e3d3a7b47f00ed3558f3341c509fb5f011a2178f9d18d5abe78b3c2d0f1e4e1a8e87b5ef036bf7d5f1c281695f430524f6a1895ca7d364a6e12ddd4ebc6
SSDEEP

192:acOeIg2N8HYkHGxkt5Rl/Vxl3UEMlllBWY6o4S41UVoa9zHJZoYQrQ1sP1oyaBUF:aIq2vl3UEMlBWLNxCVnVLQrQk1QBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eede2e80a2eddbd73ebaeeb852f14f6f_JaffaCakes118

Files

eede2e80a2eddbd73ebaeeb852f14f6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7469d575e66a41e46ba1246fc08f27d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
CloseHandle
CreateProcessA
GetModuleFileNameA
GetSystemDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetSystemTime
OpenProcess
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
CreateThread
CopyFileA
ExitProcess
Sleep
LoadLibraryA
GetProcAddress
Process32Next
FreeLibrary
GetStartupInfoA
GetModuleHandleA

msvcrt

fwrite
fclose
sprintf
rand
srand
time
fread
fseek
strstr
??2@YAPAXI@Z
_except_handler3
fputs
fgets
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
??3@YAXPAX@Z
fopen
_strcmpi

winmm

timeGetTime

psapi

GetModuleFileNameExA

ws2_32

socket
WSAStartup
gethostbyname
htons
connect
inet_addr
send

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/MANIFEST/1
.xml
.rsrc/version.txt
.rsrc_1
.text