b8cc5bc85428e49e2fd6e4a72e2d56a9_JaffaCakes118 | Triage

Sharing

General

Target

b8cc5bc85428e49e2fd6e4a72e2d56a9_JaffaCakes118
Size

68KB
MD5

b8cc5bc85428e49e2fd6e4a72e2d56a9
SHA1

5a9f51d4c642be40daa24e6eb8bddb61cd6b54bd
SHA256

cf68ff0d6c1407ff0a7f735aad5bc02bf9d668ba94738704321c4368ff44d793
SHA512

58dcd850a67a59d13ebceb1ce0a706c60a89250971e11ded84a266531ad1566e72f9aaeffe8953e811cea5775314b5e29fcea0f35b8b1e008866ef1e9c1e471d
SSDEEP

1536:QvjeRakUx3LpiLvfHLAqFvL0y+klFARF+DK:QvjuakUx3LYT8+z0hyy8DK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8cc5bc85428e49e2fd6e4a72e2d56a9_JaffaCakes118

Files

b8cc5bc85428e49e2fd6e4a72e2d56a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1a91e05bdc30a7ad0d16a7504afd142

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
_ctype_
_fcntl64
_fopen64
_fstat64
_getpwuid32
_getuid32
_impure_ptr
_open64
_stat64
atoi
bind
calloc
close
connect
ctime
cygwin_internal
dll_crt0__FP11per_process
dup2
exit
fclose
fgets
fileno
fork
fprintf
fputc
free
getcwd
gethostbyname
getpid
getsockopt
inet_addr
inet_ntop
kill
localtime
malloc
memcpy
memset
pipe
popen
printf
puts
rand
read
realloc
recv
select
setvbuf
shutdown
sigaction
signal
sleep
snprintf
socket
sprintf
srand
strcasecmp
strcat
strchr
strcmp
strcpy
strerror
strlen
strncasecmp
strncpy
strrchr
strstr
symlink
system
time
uname
unlink
vsprintf
waitpid
write

kernel32

GetModuleHandleA

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE