f6a3fb80b84c9c06a53bcc4ab4c7e8ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6a3fb80b84c9c06a53bcc4ab4c7e8ef_JaffaCakes118
Size

10KB
MD5

f6a3fb80b84c9c06a53bcc4ab4c7e8ef
SHA1

5ff6cdae9cfbb5e1dbfb49cf64ab5cdb748276a5
SHA256

cbc50675ecc6a79c39fbfbbfe0344f669b6dca42372bb6594d5cffafda3d878b
SHA512

b20495855282d73d72028d9f988d9a24708ea681f380a9911f7f94ded88b247feab356d6deb1ea814e6c053c1fadf830e4e6b7c1efeb5d010abcd18f46375ceb
SSDEEP

192:CVaSKxWXB7Agiiis6EsRi7lAeJ/YOXLV1j/lgpN6ffkSw:6KxWR7/iiis6LiRVV1CaffkSw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6a3fb80b84c9c06a53bcc4ab4c7e8ef_JaffaCakes118

Files

f6a3fb80b84c9c06a53bcc4ab4c7e8ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b3cf9de9c2f096f3383ac91a333885d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
atexit
atoi
exit
fprintf
free
fwrite
malloc
memset
printf
puts
setbuf
signal
strerror
tolower

ws2_32

WSAGetLastError
WSAStartup
__WSAFDIsSet
bind
closesocket
connect
gethostbyname
htons
inet_addr
inet_ntoa
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE