88885358efa2e4716085e3fbdc5abdc6_JaffaCakes118 | Triage

Sharing

General

Target

88885358efa2e4716085e3fbdc5abdc6_JaffaCakes118
Size

128KB
MD5

88885358efa2e4716085e3fbdc5abdc6
SHA1

164844900c991bec4d01c813287e2e760b831e73
SHA256

2241435d89047f4debfaa8639c675fa28eb38cfcdf8bc101f03b600b1ee70e30
SHA512

98c65db44350add555ae13ea243a5ffe12b56635f42e7a704b26ba26e949d6a36b6e6ef574cdebd8c7b369071dface1b195916b5de692f1c80a22ac71b2cf82d
SSDEEP

1536:G8Y4pmiLU2Ub/cVACYvj0n8Pqlll8KD0bl7gY6HMfObgALlFdLLNudDkbo:VYL2Ebj7U8Pqll8KCl7v6HrzZFtN2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88885358efa2e4716085e3fbdc5abdc6_JaffaCakes118

Files

88885358efa2e4716085e3fbdc5abdc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a56f115ee5ef2625bd949acaeec66b76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

Exports

Exports

_SSL_CTX_free
_SSL_CTX_new
_SSL_CTX_set_verify
_SSL_connect
_SSL_free
_SSL_library_init
_SSL_new
_SSL_pending
_SSL_read
_SSL_set_fd
_SSL_shutdown
_SSL_write
_SSLv23_client_method
_SSLv2_client_method
_SSLv3_client_method
_TLSv1_client_method

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ