fcf38b6ed88c7e053fd9c7b71f59aebd_JaffaCakes118

General

Target

fcf38b6ed88c7e053fd9c7b71f59aebd_JaffaCakes118
Size

127KB
MD5

fcf38b6ed88c7e053fd9c7b71f59aebd
SHA1

36a9f5860c584ba9389af6ef77cfb33905e7a1a8
SHA256

8bfe9c88b00f5d06fdd4c6a132ec10b91e1078d2365be605af0cd677280c5db6
SHA512

27af0346e713aa19392a87a279a83ddab018d7efb5a3c923063b26ddd704ea2b8b16d82c617aa9d5dc272442ef96ac8cf610ff03fb6523ba0d8b17c25eef42ab
SSDEEP

3072:RPwAtcusSzPkUrUIZKs6NsILfuNtMyAIqkG3yUocC:aYcc3rnKjiWuNtMyAfhoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf38b6ed88c7e053fd9c7b71f59aebd_JaffaCakes118

Files

fcf38b6ed88c7e053fd9c7b71f59aebd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

940d9deab18b13d4a41d148c264a0349

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_fopen64
_impure_ptr
_stat64
_tzname
abort
atexit
calloc
clock_gettime
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputc
fputs
free
fwrite
getenv
getline
gettimeofday
gmtime
gmtime_r
iswprint
localtime
localtime_r
malloc
mbrlen
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
putenv
realloc
setenv
setlocale
settimeofday
sprintf
strchr
strcmp
strerror_r
strftime
strlen
strncmp
time
tzset
unsetenv
vfprintf

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 624B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

940d9deab18b13d4a41d148c264a0349

Headers

File Characteristics

Imports

cygwin1

cygintl-8

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 624B

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 76KB - Virtual size: 76KB

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 624B

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 76KB - Virtual size: 76KB