55ef9e4405e09462bde1ec24d5b80d17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55ef9e4405e09462bde1ec24d5b80d17_JaffaCakes118
Size

3KB
MD5

55ef9e4405e09462bde1ec24d5b80d17
SHA1

7e91ee6deeb6df387830bf62cb31e78f023ac111
SHA256

7f13415024c087f7fa04229a00a8adbed4941d29ba5ee68e1cf8ccf462abea43
SHA512

48a13eb79f945d1a32bbdf8452c61159d6e1578b19790f6c4c35154635a12d499a0d505f4281a46d58f29b54a8ac03ccfd09b3e2fddcb91d3997c5d11014024b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55ef9e4405e09462bde1ec24d5b80d17_JaffaCakes118

Files

55ef9e4405e09462bde1ec24d5b80d17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce8bb22cf4d116448dd6a5e86aed304b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
socket
inet_addr
htons
connect
closesocket
send
select
__WSAFDIsSet
recv

kernel32

Sleep
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
CloseHandle
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
WinExec

advapi32

RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE