eff021ce26ac108cc8cda02f0babdcba_JaffaCakes118 | Triage

Sharing

General

Target

eff021ce26ac108cc8cda02f0babdcba_JaffaCakes118
Size

128KB
MD5

eff021ce26ac108cc8cda02f0babdcba
SHA1

79881bc50218284ceb5bf8d0b2da8ea343e97889
SHA256

229fd270b6b7a601fdba1a6c433c639848443a7a9104d270d2c941d9012312d5
SHA512

2de6eec954247f4edb93315888b0c38ba3d1e75d6ac6e214b74d14f933d60b9423782d42a7ea1b898ad11d175c692f1b7f949bc00a738ca66d583617a47d5768
SSDEEP

3072:kB+U/pvyvJjtKeXea6103iMYfMoE/WAPOq2L4AI6eI:kBxyvL6eydkjgB4AI6eI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eff021ce26ac108cc8cda02f0babdcba_JaffaCakes118

Files

eff021ce26ac108cc8cda02f0babdcba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d07b8a4d02d06c6d33e155dde6c1279

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
inet_addr
gethostbyaddr
WSAGetLastError
recv
socket
connect
closesocket
send

kernel32

LoadLibraryA
TerminateThread
GetSystemTime
ExitProcess
lstrlenA
MultiByteToWideChar
Sleep
GetProcAddress

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ