6f11e113614123375c196c4194409fbc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f11e113614123375c196c4194409fbc_JaffaCakes118
Size

47KB
MD5

6f11e113614123375c196c4194409fbc
SHA1

8fbae926fa67ed97ea415febb49d872417f4ac59
SHA256

7df84a48c53015a5f3edd1f9504d61da70397db4b5d7f915ba9394e0426bfc40
SHA512

dad6014b13120f69b1db9347a6614fa3dceec815648cbcd794861f3f67b7facb808133af990d2117d1cf11fd5fe5b3916de93ca911662d7b5a61d0e7d6c82b3c
SSDEEP

768:RP3v807DyArGwozJE+dCdcjaDwqoBBSvwYGzwua1TG2HZqtwzf5ZR2:RP3v6ArV8PcSaDBGzNG620uzfTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f11e113614123375c196c4194409fbc_JaffaCakes118

Files

6f11e113614123375c196c4194409fbc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6393de3bb4745aff3a2ba02e5e8a9a98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetComputerNameA

Exports

Exports

_SSL_CTX_free
_SSL_CTX_new
_SSL_CTX_set_verify
_SSL_connect
_SSL_free
_SSL_library_init
_SSL_new
_SSL_pending
_SSL_read
_SSL_set_fd
_SSL_shutdown
_SSL_write
_SSLv23_client_method
_SSLv2_client_method
_SSLv3_client_method
_TLSv1_client_method

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ