ba6db1acea782f3192628ec9e1dbc711_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba6db1acea782f3192628ec9e1dbc711_JaffaCakes118
Size

33KB
MD5

ba6db1acea782f3192628ec9e1dbc711
SHA1

3cbf720c779bba05ad2a49489949487e477a7b58
SHA256

1d66520e89105747720e2f2392f8baf2c9760fd3115112e8be0eda027150ef42
SHA512

32622abe017c96b475f8195776ac343ac6aa709d430be41083899275eae764fbc41e85f74e8f32f236905ec62f67aba3fdd062470695c3203f1b9ec1e5d79dbc
SSDEEP

768:8qt2qietHkQvagDSya/awwZzpfn1WjLc2IxHUw0mQMGyh:HNZNlWabnv0jfmH3Gyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba6db1acea782f3192628ec9e1dbc711_JaffaCakes118

Files

ba6db1acea782f3192628ec9e1dbc711_JaffaCakes118
.exe windows:4 windows x86 arch:x86

513921da81876d14c864aba2d62e56fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__getreent
__main
_impure_ptr
atoi
calloc
ctime
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
fputc
free
getlogin
getopt_long
getpass
getpwnam
malloc
optarg
optind
printf
puts
realloc
strcasecmp
strcat
strcmp
strcpy
strlen
strrchr
time
vfprintf

kernel32

GetEnvironmentVariableW
GetModuleHandleA
MultiByteToWideChar

netapi32

NetApiBufferFree
NetUserChangePassword
NetUserGetInfo
NetUserModalsGet
NetUserModalsSet
NetUserSetInfo

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 80B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE