eb541c73926cb8c0ada2dfa0072d59f5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

eb541c73926cb8c0ada2dfa0072d59f5_JaffaCakes118
Size

342KB
MD5

eb541c73926cb8c0ada2dfa0072d59f5
SHA1

c917fad84f24c703824889c3a69797eda1a34311
SHA256

de14cd6085d664f0ce430b43c5f6213adf0eda61434dd8654c7939b182020fc2
SHA512

71ad0de3bcc991f033e837eff9eda818b2cb75bb18f77db8494b07088a5604b6b257618aa4586ec4e6b3721eecde7e55dd5bce9bea4eaa4f678ae1f6f5437ede
SSDEEP

6144:8Y7jj1En0yN72wwKUppW0lwdgx106D9EWwUIl60yqrdqDqO:8Y7P1En0yN72wenWafb06DiWkbdi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb541c73926cb8c0ada2dfa0072d59f5_JaffaCakes118

Files

eb541c73926cb8c0ada2dfa0072d59f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47092d0141e509e5848f3f22387feddd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cyggeoip-1

GeoIP_country_code_by_addr
GeoIP_delete
GeoIP_new
GeoIP_open

cygcrypt-0

crypt

cygwin1

__assert
__errno
__getreent
__main
_ctype_
_fcntl64
_fopen64
_fstat64
_geteuid32
_getpwuid32
_impure_ptr
_lseek64
_lstat64
_mmap64
_open64
_stat64
abort
accept
alarm
atof
atoi
bind
calloc
close
closedir
connect
cygwin_internal
dll_crt0__FP11per_process
dup
exit
fclose
fflush
fgets
fileno
fnmatch
fork
fprintf
free
fwrite
gethostbyname
getopt
getpeername
getpid
getrlimit
getrusage
getsockname
getsockopt
gettimeofday
gmtime
h_errno
hstrerror
inet_aton
inet_ntoa
inet_ntop
inet_pton
ioctl
isatty
kill
link
listen
localtime
malloc
memcpy
memset
mktime
munmap
opendir
optind
posix_regcomp
posix_regexec
posix_regfree
printf
putchar
puts
raise
rand
read
readdir
realloc
rename
select
setrlimit
setsid
setsockopt
shutdown
sigaction
sigaddset
sigemptyset
sigfillset
signal
sigprocmask
sleep
snprintf
socket
socketpair
sprintf
srand
sscanf
statvfs
strcasecmp
strchr
strcmp
strcpy
strerror
strftime
strlen
strncasecmp
strncat
strncmp
strncpy
strrchr
strsignal
strstr
strtok
strtol
tcgetattr
tcsetattr
time
uname
unlink
usleep
vprintf
vsnprintf
waitpid
write

cyggnutls-openssl-11

SSL_CTX_new
SSL_connect
SSL_free
SSL_library_init
SSL_load_error_strings
SSL_new
SSL_read
SSL_set_fd
SSL_write
SSLv23_client_method

kernel32

GetModuleHandleA

Sections

.text
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

47092d0141e509e5848f3f22387feddd

Headers

File Characteristics

Imports

cyggeoip-1

cygcrypt-0

cygwin1

cyggnutls-openssl-11

kernel32

Sections

.text Size: 265KB - Virtual size: 264KB

.data Size: 2KB - Virtual size: 2KB

.rdata Size: 70KB - Virtual size: 69KB

.bss Size: - Virtual size: 21KB

.idata Size: 4KB - Virtual size: 3KB

.text
Size: 265KB - Virtual size: 264KB

.data
Size: 2KB - Virtual size: 2KB

.rdata
Size: 70KB - Virtual size: 69KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB