0125cce52cc2997c0eeea2e7bf301387_JaffaCakes118 | Triage

Sharing

General

Target

0125cce52cc2997c0eeea2e7bf301387_JaffaCakes118
Size

77KB
MD5

0125cce52cc2997c0eeea2e7bf301387
SHA1

da52eeae4399c536d55378ec50fc9f363bf67c44
SHA256

0243ee1e58b773490cfd4ec3a0fa55832a7371f880c41e3826c78829a92baaa3
SHA512

1104795d72f3336a9d92114f2359a2bad3ec83491d89958e477cdef7e1132d5f905c8e44e527edfa9537ee9c372428bfe66b5fd282af3c37e9aa916ad0daf518
SSDEEP

1536:buZbeVNxuhLYTj7wLK9tKNjfG9OUwzqNKkJyyc+WBSaoYAHdRpMfX2Ru:qZqVbuhLYTYLK9tEbHUnsY5WQ2ATK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0125cce52cc2997c0eeea2e7bf301387_JaffaCakes118

Files

0125cce52cc2997c0eeea2e7bf301387_JaffaCakes118
.exe windows:4 windows x86 arch:x86

799e260a62475623ddf80b12faa9e043

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
lstrcmpA
GetModuleFileNameA
SetPriorityClass
GetCurrentProcess
WriteFile
CreateFileA
lstrlenA
CreateThread
GetSystemDirectoryA
CopyFileA
GetSystemTime
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
GetVersion
LockResource
CreateProcessA
FindResourceA
CloseHandle
LoadResource
GetVersionExA
ExitProcess
TerminateProcess

user32

wsprintfA

advapi32

RegFlushKey
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegCloseKey

ws2_32

bind
connect
htons
inet_addr
gethostbyname
socket
accept
recv
listen
send
htonl
WSAGetLastError
__WSAFDIsSet
ioctlsocket
select
WSAStartup
closesocket
inet_ntoa

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ