1281bac980a05d811d9a29ad9d85e83e_JaffaCakes118 | Triage

Sharing

General

Target

1281bac980a05d811d9a29ad9d85e83e_JaffaCakes118
Size

14KB
MD5

1281bac980a05d811d9a29ad9d85e83e
SHA1

84e694a934c966fe325cd201f8e3995008454fd9
SHA256

9767f36c746280595f5a86ebe1e66475c93a550f8c8022f55aa098057aec32de
SHA512

a66574e067ab5077953bfc2485b36296b38fd8b69e1bc5e1bf1968ed52edd352b49c09058cf5fde1562245597bbaf2e65c7f3bfd04c2ab8339a184951db0ee5c
SSDEEP

192:TBA5VRP2c9lY+uZEJLzSR7MR5VX5vn7KlWq2HDei92rMDeGudo3ggydha:TBA5OcskvSR7MR5VJvulBqD1iMDFMdw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1281bac980a05d811d9a29ad9d85e83e_JaffaCakes118

Files

1281bac980a05d811d9a29ad9d85e83e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1349639907ec97d8cafc99699037c3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
_impure_ptr
calloc
cygwin_internal
cygwin_umount
dll_crt0__FP11per_process
endmntent
exit
fprintf
free
getmntent
getopt_long
malloc
optind
printf
realloc
setmntent
strerror
strrchr
strstr

kernel32

GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 80B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE