3c8674ba77432b668080437d21c54f3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c8674ba77432b668080437d21c54f3e_JaffaCakes118
Size

41KB
MD5

3c8674ba77432b668080437d21c54f3e
SHA1

4b445a79901990c98dfe6afd9f3ef3a2f272e3cf
SHA256

a8d3cc040d7c65134d0b895cb5b9ce49744f99244ba4f62d2ca2a967a9f1b38e
SHA512

da5bf3e1df9a9da5c1ccd0e331b07a02b821f68850686fd584c012aaeb690d6b5dda558bdd4f722bf03c29757c0a0e73cd3f82a1891935c77d1657f4bec8b9fc
SSDEEP

768:QF6ODT1BCKcpt3bKBsJW2mWC7rA8B/sCXQ+fKyMRI:wFDTbZcptrbW2mWyrA8kCXQ+SxW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c8674ba77432b668080437d21c54f3e_JaffaCakes118

Files

3c8674ba77432b668080437d21c54f3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a4de06615e6d0642b9a8949cc06db00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

GetActiveWindow

Exports

Exports

_SSL_CTX_free
_SSL_CTX_new
_SSL_CTX_set_verify
_SSL_connect
_SSL_free
_SSL_library_init
_SSL_new
_SSL_pending
_SSL_read
_SSL_set_fd
_SSL_shutdown
_SSL_write
_SSLv23_client_method
_SSLv2_client_method
_SSLv3_client_method
_TLSv1_client_method

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 691B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ