fa1fe63afb8caeb612cc240b8fbef675_JaffaCakes118 | Triage

Sharing

General

Target

fa1fe63afb8caeb612cc240b8fbef675_JaffaCakes118
Size

29KB
MD5

fa1fe63afb8caeb612cc240b8fbef675
SHA1

ffeca17e8f7472fe59fe6a1cfae5ae837ebd320f
SHA256

77b2348b64c95e0d4f3cebe6dee98081f8b0212099bd2c98fcb86985311665ea
SHA512

a269647874cbb330c1d3af47a1f1ebd6b0ce926bad5cf27a269a90c6bb80525c4aac5feeeffb015c46dcc6caa3eeb9ecae5f5a6e404d3f79aa7e0e199a12fe04
SSDEEP

768:RWIkr7rCzUBztNDKKjBXBPdPhyqVg2zl1DVeW4cA:RWI9ziXPZzl1DVeWzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa1fe63afb8caeb612cc240b8fbef675_JaffaCakes118

Files

fa1fe63afb8caeb612cc240b8fbef675_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25506a24004105a9b998c5dffb3b0625

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_fopen64
_freopen64
_fstat64
_impure_ptr
_lseek64
_open64
_stat64
abort
atexit
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fgetc
fprintf
fputs
free
getenv
isatty
iswprint
malloc
mbrtowc
mbsinit
memchr
memcpy
memset
printf
putc_unlocked
putchar_unlocked
read
realloc
setlocale
strchr
strcmp
strerror_r
strlen
strncmp
vfprintf

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 768B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE