a79a45b2b59a8eda0924d7662b5d2c33_JaffaCakes118 | Triage

Sharing

General

Target

a79a45b2b59a8eda0924d7662b5d2c33_JaffaCakes118
Size

27KB
MD5

a79a45b2b59a8eda0924d7662b5d2c33
SHA1

f93b1bdbd7a8656ff577ecbf52bd22629184b493
SHA256

03e86ad51e01d4770dac32320db43c4fd5379b2d1e167334396f40c5ccc3a5ea
SHA512

15fe98df15ccdf16944e7ed64d0090b3a44dabda080f904579a8e51706acbbbf5bd9fac52b568303d4780978327df60d773d891137a6519683aef0206868113c
SSDEEP

384:cKAvipsbe2AhiIpr8pfasu3h6YpgiBn7E+8W3DsNucFmBAn6lbKwLsRG9vghBI1V:vELrSCBgsoxR/nUWF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a79a45b2b59a8eda0924d7662b5d2c33_JaffaCakes118

Files

a79a45b2b59a8eda0924d7662b5d2c33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

073e3aad5a100bc7b908bbd7acf950c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__main
abort
atoi
calloc
close
connect
cygwin_internal
dll_crt0__FP11per_process
exit
free
htons
inet_addr
malloc
memcpy
memset
perror
printf
pthread_mutex_lock
pthread_mutex_unlock
read
realloc
recv
select
send
sleep
socket
strlen
strtoul
write

kernel32

AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE