1058d42c07e01c2df1d40bf11fe4f6c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1058d42c07e01c2df1d40bf11fe4f6c5_JaffaCakes118
Size

16KB
MD5

1058d42c07e01c2df1d40bf11fe4f6c5
SHA1

5af54ebe74a305be0f3b1cb476f1b98a101b9e8f
SHA256

f07845aef74ca4109a8dc15bb10ef358ca45ad20ea0ce62e8cd1256e226f0c7d
SHA512

1ab64a5240010e5c1ac9b8feb8f50c96c8723375cdbac5d0a8f5cede1790c95918b44e670f514f45707cd43229a9e8153652b27ca05121022a333c55a23ee67f
SSDEEP

384:4gIF6lEBZJkTUF+mpFC2sOlMkoJS4t4rUtM:KH+mHCioV4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1058d42c07e01c2df1d40bf11fe4f6c5_JaffaCakes118

Files

1058d42c07e01c2df1d40bf11fe4f6c5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3c854583c93110f3cb945eb3c4cc053b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryExA

ws2_32

closesocket
gethostbyname
recv
send
setsockopt

ntdll

RtlGetAce

Exports

Exports

kmiwefa

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ