ff3b26b216032dc5b51b3084e2eb357e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff3b26b216032dc5b51b3084e2eb357e_JaffaCakes118
Size

9KB
MD5

ff3b26b216032dc5b51b3084e2eb357e
SHA1

8b508083f1be06c25c648b901853c470ddd1f191
SHA256

50f941d22820cdf69d012b4f1d6ce2e578e3608433f06446c1b54f6c6b464b66
SHA512

7dcda4007d64ae5a6fe86e40bb608e8265737923fc6e424fa1b1c534a8ebee4d460429843ff23fe88c04d2f4bab7f25b34b8c8415daf89bbb127593904f8b2b9
SSDEEP

192:WVHazDzKw8lh8QC5FhnRFnvsgSEfjMTq+xdW4u:WVHaz3K1lh8j5sMfrEX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff3b26b216032dc5b51b3084e2eb357e_JaffaCakes118

Files

ff3b26b216032dc5b51b3084e2eb357e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

81e699b69254d2115a55945d724404f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetProcessHeap
GetTickCount
HeapAlloc
HeapFree
LoadLibraryA
OpenMutexA
GetModuleFileNameA
Sleep
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
ExitThread
CloseHandle
CreateThread
CreateMutexA
RtlZeroMemory

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey

ws2_32

WSAStartup
accept
bind
closesocket
connect
gethostbyname
ioctlsocket
listen
recv
select
send
setsockopt
shutdown
socket

Exports

Exports

svtplus

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ