468cf882ff12445fc7159f042986a2a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

468cf882ff12445fc7159f042986a2a2_JaffaCakes118
Size

45KB
MD5

468cf882ff12445fc7159f042986a2a2
SHA1

018d7d8cf280739d0e8971043317c413422f27ac
SHA256

cf48a99a916fd959e33621073ac20f74b9c6a0fb0e5baf969fc175ed70ae5ab4
SHA512

0bc59539d72ff7001e40035b92cfac2628ed0f5d57db3b462810f0bc3de5fe22bd912404ccb778e1f808c37bc880a1c5ad7e3ef3ee1196303b9a98e33c6ba458
SSDEEP

768:Uo2kCq6SgLxxF6WbQgCtUJ8sximfv5sqAquIDF0FZOGfyULUZGvt8oOrqLJThI:Uo2b2LyJpimfhd5uIDFIlfylgt8oOuLk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
468cf882ff12445fc7159f042986a2a2_JaffaCakes118

Files

468cf882ff12445fc7159f042986a2a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a5adb909a526af4e7b6131b47ca9c54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetFileSize

Exports

Exports

_SSL_CTX_free
_SSL_CTX_new
_SSL_CTX_set_verify
_SSL_connect
_SSL_free
_SSL_library_init
_SSL_new
_SSL_pending
_SSL_read
_SSL_set_fd
_SSL_shutdown
_SSL_write
_SSLv23_client_method
_SSLv2_client_method
_SSLv3_client_method
_TLSv1_client_method

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ