0798ef5feb7dfa3de2ae2007e7c6a6b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0798ef5feb7dfa3de2ae2007e7c6a6b7_JaffaCakes118
Size

2KB
MD5

0798ef5feb7dfa3de2ae2007e7c6a6b7
SHA1

9d878b61bde319e87e85f43371beabf1bd660b9f
SHA256

95d71dfb891cb2a1e566b2dc68214a50850ba506eff87c67b6c3c1dcb3083b39
SHA512

83246c43702060914716d2248c981fcf34ec792ac544cf950c7158edec39613290fd36dc5ea8c1a946f927b237084d9a41a0094f46ff6c5d0890f3561e94ffc7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0798ef5feb7dfa3de2ae2007e7c6a6b7_JaffaCakes118

Files

0798ef5feb7dfa3de2ae2007e7c6a6b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01de0d2ff650869bfafee216fcad1b50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread

wsock32

send
recv
closesocket
accept
listen
bind
htons
socket
WSAStartup
WSACleanup

Sections

.text
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE