3d042c6fd3bf7096db61810c1830a5f8_JaffaCakes118 | Triage

Sharing

General

Target

3d042c6fd3bf7096db61810c1830a5f8_JaffaCakes118
Size

28KB
MD5

3d042c6fd3bf7096db61810c1830a5f8
SHA1

aa30cb1063675efd98b5f7b3809f92bd1a3e9373
SHA256

db9fff46632ec7a533663a1de8f5cc345a50ce9567a24e291454fd7436b0ccca
SHA512

b64545243cf8c1f2561dd159f5110453eac18a5658b7b25203b9daa5b0fcdeb3021e3679cda598d68d0e9384b4f9a69082a793804c1b7b08a0d56db7a09a8693
SSDEEP

768:6/eZ4dAZpgAIXyx4LMn5T+6nAWjdD3DhPKLFI:6//uZpvRxhFAWzDtE+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d042c6fd3bf7096db61810c1830a5f8_JaffaCakes118

Files

3d042c6fd3bf7096db61810c1830a5f8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

41db50321d43c05b28f35bd8757d1595

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

TransmitFile
getsockopt
gethostname
WSACleanup
htonl
bind

msvcrt

??_Fbad_typeid@@QAEXXZ
?terminate@@YAXXZ
??3@YAXPAX@Z
_CIasin
??_U@YAPAXI@Z

Sections

.text
Size: 14KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE