c10ee096db79fbbb1f60fe9263814765_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c10ee096db79fbbb1f60fe9263814765_JaffaCakes118
Size

31KB
MD5

c10ee096db79fbbb1f60fe9263814765
SHA1

4f53e40c582c8e33f0934d5381273d34e409714e
SHA256

36e624ae234a93cf1b44e21bafd0518da899f2384ea37045abf0eb23aebafd0e
SHA512

f145ff7e6d57ca374658b6446149f58f191f6285f2ef253a11628f099f14a5af8612310337a4f109308f26f565f62f0f66ce85671f498b1a64295e238bb002d0
SSDEEP

768:d7TFrE/aq12YNB5XQ/5np+nPK9PhyqVZ2z/aD6oYTy5p:xAaq4Vp8PKazCG2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c10ee096db79fbbb1f60fe9263814765_JaffaCakes118

Files

c10ee096db79fbbb1f60fe9263814765_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f248da455a76753df40d8874796640ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
__mb_cur_max
_chown32
_ctype_
_exit
_fchown32
_fcntl64
_fstat64
_impure_ptr
_lchown32
_open64
_stat64
abort
atexit
calloc
chdir
chmod
close
cygwin_internal
dll_crt0__FP11per_process
exit
fchdir
fchmod
fclose
fflush
fork
fprintf
fputs
free
getenv
iswprint
malloc
mbrtowc
mbsinit
memcpy
memset
mkdir
printf
putc_unlocked
raise
realloc
setlocale
strchr
strcmp
strerror_r
strlen
strncmp
umask
vfprintf
waitpid

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 560B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE