2a3e71515c1251370d1005ff6b56ea28_JaffaCakes118 | Triage

Sharing

General

Target

2a3e71515c1251370d1005ff6b56ea28_JaffaCakes118
Size

11KB
MD5

2a3e71515c1251370d1005ff6b56ea28
SHA1

c76ef1043c7b63ed713f6f1055c2e63e0fd8c41a
SHA256

6db49d8a1e3ee26792a5ae7de4537884c23462e7c073eaab83e90181ae56415e
SHA512

f4c1e40ad4c953e883f416653f83518ed4ba001709b3ba35c0b7d92d7d4d2ae1b4d4424ac04cdc4932ecb6eab0303df49b7205cbc982c9441dafc604c8acd0e3
SSDEEP

192:bu2l+xFVkjKWuUczYH7Vvl5Iboa1SWAYJ/FDbvrDK3SYIm:bR+xFVklczYH7Vvl5AIo/9jruM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3e71515c1251370d1005ff6b56ea28_JaffaCakes118

Files

2a3e71515c1251370d1005ff6b56ea28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d756f72a238f56825435cb6b766abca8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

lstrcatA
CloseHandle
CopyFileA
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetComputerNameA
GetDriveTypeA
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
LoadLibraryA
RtlZeroMemory
SetCurrentDirectoryA
SetFilePointer
Sleep
WinExec
WriteFile
GetCommandLineA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA

wsock32

htons
WSAStartup
socket
send
recv
closesocket
connect
inet_addr
WSACleanup

advapi32

GetUserNameA

shell32

ShellExecuteA

wininet

InternetConnectA
InternetCloseHandle
FtpSetCurrentDirectoryA
FtpPutFileA
InternetOpenA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE