f5eb37e9f30324265485be0ef68d7662_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5eb37e9f30324265485be0ef68d7662_JaffaCakes118
Size

81KB
MD5

f5eb37e9f30324265485be0ef68d7662
SHA1

6d81a0e58905577f6521f495093efac8a0d7dd66
SHA256

7f53628707ec4bc7fbfc44b6201523b3c2af6a62c83801fe7450fb60226ddc92
SHA512

b3d8c2644621dc15daf41adc0114473119d9934a24375b84ea624f63d9ea590f6f85b7996b7c1f7935f39b0c61ceb8590c17f8e2071421ea3bfc5a345db04d45
SSDEEP

1536:z1saQmP67/s9+fjwW+ekrMkPlnZHKGRQGoFgMM:z1saQEf+fjws03P7NhoFg3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5eb37e9f30324265485be0ef68d7662_JaffaCakes118

Files

f5eb37e9f30324265485be0ef68d7662_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb2e872db7dd70101e21646f0ce8c370

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygcrypt-0

crypt

cygwin1

__assert
__errno
__getreent
__main
_fcntl64
_fstat64
_geteuid32
_getpwuid32
_impure_ptr
_lseek64
_open64
abort
atof
atoi
atol
bind
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
free
getopt
getsockname
gettimeofday
link
localtime
malloc
memcpy
memset
optarg
optind
posix_regcomp
posix_regexec
printf
puts
read
realloc
rename
select
snprintf
sprintf
sscanf
strcasecmp
strcmp
strcpy
strerror
strftime
strlen
strstr
time
uname
unlink
vprintf
vsnprintf
write

kernel32

GetModuleHandleA

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE