5336e1e0b0900f034030a0b97de040f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5336e1e0b0900f034030a0b97de040f9_JaffaCakes118
Size

28KB
MD5

5336e1e0b0900f034030a0b97de040f9
SHA1

aaeb048fe2b34595aebaf2e5771776539a930566
SHA256

c9d8f5efd0c5cb3f192f45b78cebf1aa2ebeb239e0b010bedb6de8df8f7beaac
SHA512

04e09a4e9227079928caf66bd3f53325769b6d31bc6d081c65b1dba7e0678ae62e364b01c9d38228220edfbbd34bc25222b168104ee03090334db00f8e8d7439
SSDEEP

768:5e/wKRc1Vpo3EZJD3g0qJKEJmrlQgmGWyR9Dg6Q+Z5DmMM5RE:5e/21U3iysQeR1gp+ZcPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5336e1e0b0900f034030a0b97de040f9_JaffaCakes118

Files

5336e1e0b0900f034030a0b97de040f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5819bd25c416c674b13d45b0c6679b43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAAsyncGetProtoByNumber
__WSAFDIsSet
s_perror
closesocket
TransmitFile
AcceptEx
shutdown
recvfrom
GetTypeByNameA

user32

CreateDialogParamA
CheckDlgButton
AnyPopup

shell32

DllRegisterServer
InternalExtractIconListA
DAD_DragMove
CheckEscapesA
IsLFNDrive
OpenRegStream
Options_RunDLLW

Sections

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE