f0fa7ce1e031d349218b5a85709ca015_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0fa7ce1e031d349218b5a85709ca015_JaffaCakes118
Size

13KB
MD5

f0fa7ce1e031d349218b5a85709ca015
SHA1

7f07ac3cadb343f4d5552e751cdc2026babd0402
SHA256

44fab66d50d3ea21c7900278283d375380d41a6d1d53aaa09734930cb1285c5a
SHA512

692b176ef2d8522d985418a7c1c183490950bbca303bd84af4158fc88e3004d1c9b16f515afbe8727044d32f103c08aaca8bfab449d96d4d7ed8d64b2b0c49b1
SSDEEP

192:rwheKI2VD44DGjjBpd7QikVFkdeHN71gMmn/ATG0A9bMSDD2Fesv:rwEwDB49zlkVK8tJM/IG0ASSDDyeg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0fa7ce1e031d349218b5a85709ca015_JaffaCakes118

Files

f0fa7ce1e031d349218b5a85709ca015_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64f7ad5f0dea58b97d945feaf45210a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__getreent
__main
_fopen64
_impure_ptr
atof
atoi
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
free
fscanf
fseek
ftell
fwrite
malloc
printf
puts
realloc
_fopen64
cos
log10
sin

kernel32

GetModuleHandleA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 256B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE