07e2ad1314ed0082fef613be8034b811_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07e2ad1314ed0082fef613be8034b811_JaffaCakes118
Size

6KB
MD5

07e2ad1314ed0082fef613be8034b811
SHA1

4531f56346fce81e45bb265c2cb815838dddbc07
SHA256

43b1a4644b6f77cb6ad99b049ab0887be838198547036b9f17198b7d0fa33b22
SHA512

70ccdc922ed2095e5fcb1d6a7e81988fe19af74b474f2ba94caeafb568b354e05141ce4105cac680b914326230bb911ed7aafadac9d66fc012fbc9eceb377e37
SSDEEP

96:UKFWWox2TUdy+BgtEqvqxqVfcWdAQ7Lhx+G2vCZ77a4rrzWFQ9:Fv7+/oikGQ7Lhx+GZZlrr6FQ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07e2ad1314ed0082fef613be8034b811_JaffaCakes118

Files

07e2ad1314ed0082fef613be8034b811_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fd1f2564fe6bca8b4bcbb5b775eab27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

gethostbyname
recv
send
connect
WSAStartup
closesocket
htons
socket

urlmon

ObtainUserAgentString

comdlg32

GetFileTitleA

kernel32

Process32First
GetFileAttributesA
GetLastError
GetProcessHeap
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Process32Next
WaitForSingleObject
TerminateProcess
OpenProcess
CloseHandle
GetShortPathNameA
lstrcmpiA
CreateToolhelp32Snapshot
WriteFile
CreateFileA
CreateProcessA
GetWindowsDirectoryA
FreeLibrary

Sections

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE