049f2011f9dbd9f4b47711938a8aa558_JaffaCakes118 | Triage

Sharing

General

Target

049f2011f9dbd9f4b47711938a8aa558_JaffaCakes118
Size

7KB
MD5

049f2011f9dbd9f4b47711938a8aa558
SHA1

1a3961dd6e44481391f6e2311ba576cc6d501d91
SHA256

107c360075db807eafe088ef4bef9e650153a672c42aa2d6e1ed886fbbeb8fc9
SHA512

46bae3c2b7711e72ec0ee3739878c2b8c131ebf8c4423e9d7c8aeed12da2f0012a0769a2883c40f1d12873dfcf22eb9a81f6754a915d367537bccda38098c6fc
SSDEEP

96:TeT+ZqLZwtem2AFAvreXEVBGEJYvwJ2keiQL2nEjAn+sh2:iqZG2QoIe0VfJkg7tz+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
049f2011f9dbd9f4b47711938a8aa558_JaffaCakes118

Files

049f2011f9dbd9f4b47711938a8aa558_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04624843a73faf1fe748b798d5680ee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
gethostbyname
htons
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ