5ba93df67df2271510b75b81614112cf_JaffaCakes118 | Triage

Sharing

General

Target

5ba93df67df2271510b75b81614112cf_JaffaCakes118
Size

40KB
MD5

5ba93df67df2271510b75b81614112cf
SHA1

8a7eb241d5a916b0aab72304c3393b736d8349c6
SHA256

7e73e73d99eb11a1f97a288073c295ca4e5e0f0ba2881335205c5828324f0e46
SHA512

faec8c9ddc58b9ff5e64fa457e9bd317d8ec7743aff311d95d5115da6f36af6042642ca9ab8f4c1e2b9b63c06923e542f1bcf6aacd34c7d51d67056b38714ee9
SSDEEP

768:TUe1JLXYHozQQPJKDIRecgwXdTo0LxrfmGDdeD7wV+ly9/EttcPvwDkK:vJLoIz5ysgWFIgdeD7wQg/i6wp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ba93df67df2271510b75b81614112cf_JaffaCakes118

Files

5ba93df67df2271510b75b81614112cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27973262e2a15a6ac4ea0d6c9a65dc54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateEventA

Exports

Exports

_SSL_CTX_free
_SSL_CTX_new
_SSL_CTX_set_verify
_SSL_connect
_SSL_free
_SSL_library_init
_SSL_new
_SSL_pending
_SSL_read
_SSL_set_fd
_SSL_shutdown
_SSL_write
_SSLv23_client_method
_SSLv2_client_method
_SSLv3_client_method
_TLSv1_client_method

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ