5681d13035ee303501533c5a5df0b309_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5681d13035ee303501533c5a5df0b309_JaffaCakes118
Size

28KB
MD5

5681d13035ee303501533c5a5df0b309
SHA1

84f785ddfe4543627fe1123bda0bf3cbe4261acb
SHA256

db65a9a6d607929f57e3bc26640eab82e773c150153d8e531dd098d45b56c0e3
SHA512

babe8683313bd714d1c1e86fd043224067d689dc7d93b474d49417a5cc0cece889391b050ae239cafa4516279bc8f1f3af7373251d131371911c0c765785eec9
SSDEEP

384:eak0FdNK17a3eA/XiouXK6FqTr2DMA3W3D/MrdepZxKpYlFmf:Xk0vNKRa77uXK0HmzUMcpYlFmf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5681d13035ee303501533c5a5df0b309_JaffaCakes118

Files

5681d13035ee303501533c5a5df0b309_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29b6b79d4b955baf0c1b8c9f1156680f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ