0a8b6f9087689fe48f4cd40c9a268d2c_JaffaCakes118 | Triage

Sharing

General

Target

0a8b6f9087689fe48f4cd40c9a268d2c_JaffaCakes118
Size

26KB
MD5

0a8b6f9087689fe48f4cd40c9a268d2c
SHA1

0b7cc9ee176582acb93376edadddf1247acc9b67
SHA256

7c5c06a5ae2b56ab7b49240baa9c268e5f6cde70ff0769c217907a80b2247376
SHA512

a2f51ffa4299f2d3d07f0a92ba7e9338d8b16dcf1fc826f6b29ede91bd9d240e499c37ef3ca18cdfc2041fafd719c3d063514aacfeaa84b260c56419d1689ba6
SSDEEP

768:tQ3V1LO3+BTwyiL/rPpPhyqVaxLlisKl4qN:SqVrP2lisKldN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a8b6f9087689fe48f4cd40c9a268d2c_JaffaCakes118

Files

0a8b6f9087689fe48f4cd40c9a268d2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34925e2a350f0daed4f805ffef216e94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_getegid32
_geteuid32
_getgid32
_getgrent32
_getgrgid32
_getgroups32
_getpwuid32
_getuid32
_impure_ptr
abort
atexit
calloc
cygwin_internal
dll_crt0__FP11per_process
endgrent
exit
fclose
fflush
fprintf
fputs
free
getenv
getpwnam
iswprint
malloc
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
putchar_unlocked
realloc
setgrent
setlocale
strchr
strcmp
strerror_r
strlen
strncmp
vfprintf

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 640B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE