7048db9852bbaeb9b50ed87cc8136f6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7048db9852bbaeb9b50ed87cc8136f6d_JaffaCakes118
Size

21KB
MD5

7048db9852bbaeb9b50ed87cc8136f6d
SHA1

01c1c4db296f10cec9b4d137cec68a6718ea1665
SHA256

7a3d24226944214a60a8592d650590efb6913ac28ea52374deccf56f0e3c9be9
SHA512

7129a8b2451c926c8ffa2bb5cabb05ae0fee2d854610ac00b15a3547e228e77fb4e538b1c9649f164e4b121f8ff30a1a6eb7082fb97a29d1b5584f74d4d99135
SSDEEP

384:0kD0SSGKmfQa5gGZm5YkEBZS2DZu718a:BD0SSGKmYPrYBlD01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7048db9852bbaeb9b50ed87cc8136f6d_JaffaCakes118

Files

7048db9852bbaeb9b50ed87cc8136f6d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dbd80419c0854553aa349a3f7d976e70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

cygwin1

abort
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
free
malloc
memset
pthread_mutex_lock
pthread_mutex_unlock
realloc
sprintf
strcat
strchr
strcpy
strlen
strncpy
strtoul

kernel32

AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA

Exports

Exports

seen_start

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 848B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE