b961834d84165f6327202d6154b5cac6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b961834d84165f6327202d6154b5cac6_JaffaCakes118
Size

41KB
MD5

b961834d84165f6327202d6154b5cac6
SHA1

58804c3289b99bc44b018f72349444fd2743a6ad
SHA256

58a29ea069a375ef71143f349ac6d4793aeebb84b14f85250b1b11880e28882d
SHA512

54768848e3c4e4f36f8d22560d51c6c2201e186474759ca4e685c53f63091e4534cc3e2ee4910842464a150eeed28f611fb00349871aeb4ebd1efacede8e1ad1
SSDEEP

768:SLogkqi1NBLMB/RBKuPBQfFlhz0tzWnkXx50CyuvX55t2kPdPhyqVSqO:SSqiiMlizWkB5CmkkPG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b961834d84165f6327202d6154b5cac6_JaffaCakes118

Files

b961834d84165f6327202d6154b5cac6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0dbbfe6af35ecbd84a71e18d4d8f2c48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_getgrgid32
_getpwuid32
_impure_ptr
_lstat64
_stat64
_tzname
abort
access
atexit
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputc
fputs
free
getenv
gmtime_r
iswprint
localtime
localtime_r
malloc
mbrlen
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
putchar_unlocked
readlink
realloc
setgrent
setlocale
setpwent
sprintf
statfs
strchr
strcmp
strcpy
strerror_r
strftime
strlen
strncmp
strspn
tzset
vfprintf

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 720B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE