2648cf49716ff9bfd3caa104c122fee6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2648cf49716ff9bfd3caa104c122fee6_JaffaCakes118
Size

99KB
MD5

2648cf49716ff9bfd3caa104c122fee6
SHA1

612b6d6f11936d600e9a0ee9a78d53ae20e03904
SHA256

1ccd7599e4067032f2b1bfc6fde469cb53bf64f5e16088c038f66d2d5f05ad6a
SHA512

692dee825cd5365252c1e66dcfa160d7c85d6d3872a8adffe6ac7752eb6f4fd217c4d9954b2b680342e1e9afd2ce6d87bdad6bfa43e65ef83d224141a606975e
SSDEEP

768:jOPFYVUBagD+fnH8B/RBCWjh+BsJVUBsSkgPdPhyqVy3:StYVnhWjxKBigPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2648cf49716ff9bfd3caa104c122fee6_JaffaCakes118

Files

2648cf49716ff9bfd3caa104c122fee6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da0e1f04b3e3c18cda36bb731167b9d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_freopen64
_impure_ptr
abort
atexit
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
fwrite
getenv
isatty
iswprint
malloc
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
read
realloc
setlocale
sprintf
strchr
strcmp
strerror_r
strlen
strncmp
strtoumax
vfprintf

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE