fd5e6b92301fd7b44e9c6c33151bbf84_JaffaCakes118 | Triage

Sharing

General

Target

fd5e6b92301fd7b44e9c6c33151bbf84_JaffaCakes118
Size

8KB
MD5

fd5e6b92301fd7b44e9c6c33151bbf84
SHA1

e1f0f6ff783b55d22f49ffacd717952c8190eca4
SHA256

5342b1eb9f78b9a0c5088c3048242d6c5f6ce668a3a1a33e4b8ec643e40cfad4
SHA512

5191e5ff66562da1c12c06a407ff05dd76d70fa2beeb87d93b8f27605541feee6284f26bb025e45b08ad5adf0b1283a6e492093440657e2d58f4fe6a8f03ff16
SSDEEP

192:znL/zjT4dYneJQbMll/GBEE/vooikqCsEKGZ4b5:TjzAdYUQbYsikqCsEjZi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd5e6b92301fd7b44e9c6c33151bbf84_JaffaCakes118

Files

fd5e6b92301fd7b44e9c6c33151bbf84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcee84964890dd4dea8bf385d652b3e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateThread
ExitProcess
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

_close
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
fprintf
free
fwrite
malloc
memcpy
memset
signal
sprintf
strcmp
strcpy
strlen

wsock32

WSAGetLastError
WSAStartup
connect
gethostbyname
htons
inet_addr
recv
send
socket

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE