f5454b4fde3d61b2a7c503dc9cade8c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5454b4fde3d61b2a7c503dc9cade8c7_JaffaCakes118
Size

9KB
MD5

f5454b4fde3d61b2a7c503dc9cade8c7
SHA1

b88bbdfd8125ae43ba53ec01b57c2d5aa06e6a61
SHA256

533145453beb8bcf9ff2049abdc95a4c557cac8d2303f2e69321aad0dcefd594
SHA512

7f71ef3783289189b4eb9bb570a38f3fee18fc4932f13c34816d3f63d50790654088bc32074c2a47d4b05b370b9b436c4e8eb95c69ca184d99df79f58c7acd14
SSDEEP

96:9bvm6qTj2o5WLayTuQFNFVbSVVNw54Zr/KcGkmD9J0G/S/mIbvm75Whe:JvBaCoSRjMTwGZT/GkmD9J0Ga/xvP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5454b4fde3d61b2a7c503dc9cade8c7_JaffaCakes118

Files

f5454b4fde3d61b2a7c503dc9cade8c7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

30527e1faa3dec70148817f3652830c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

socket
connect
bind
recvfrom
listen
accept
WSAStartup
gethostbyname
send
htons
sendto
closesocket
select
__WSAFDIsSet
recv

wininet

InternetGetConnectedStateEx
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

kernel32

GetTickCount
ExitProcess
GetWindowsDirectoryA
CreateThread
Sleep
lstrcatA
lstrcmpA
lstrlenA
CreateFileA
ReadFile
SetFilePointer
CloseHandle
GetFileSize
GlobalAlloc
GlobalFree
lstrcpyA

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ