057b80fed87614cdc6eb42292e476d56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

057b80fed87614cdc6eb42292e476d56_JaffaCakes118
Size

7KB
MD5

057b80fed87614cdc6eb42292e476d56
SHA1

92d7b6aad13872143d768354605cbfd79afb52d4
SHA256

deb0e6560d8884c8a95422fd93019423bfa4a19ed5a9a5a6fe0347de409a2b84
SHA512

f2966a18da3fb895e39c2b61c4a7d313319fe5a34d21e986e2599df75c535df4f8507d20046ac914091222492fba56018ef361080df389f2d2180429894e0074
SSDEEP

96:36lXMaaDEyxkwfzn2rjpiZV7L/JSzClqgY6ghK4hNGcOW:qeXLxk7AZZN9P0NG1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057b80fed87614cdc6eb42292e476d56_JaffaCakes118

Files

057b80fed87614cdc6eb42292e476d56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d32cb9e6081f930e60ddf5ffb3323e51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
htons
inet_addr
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ