225f2692bcab566588a0bf16fb5d04ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

225f2692bcab566588a0bf16fb5d04ed_JaffaCakes118
Size

13KB
MD5

225f2692bcab566588a0bf16fb5d04ed
SHA1

0d1d3bc7e4d7a859681fcaf11227b68690cd7a95
SHA256

ba2ead09e693084f95b11fcb7b1da2319460342fc7f577387ff9cffb4451d1d8
SHA512

cfb4fb5735146386ec6c5088e826ce6e9a85fc4ece1756133446999467d4ff21cdf3d649e03fb1f41c4e885f03e4e460798001634486b746aaa3eddf8dee8d43
SSDEEP

192:tJsvWIGazF/G8OWYm142eLQz5z8zfrTSAlABWwOfrC8MyXZ:tC7GazF/FaPLMz8zqoxwOfrC8HZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225f2692bcab566588a0bf16fb5d04ed_JaffaCakes118

Files

225f2692bcab566588a0bf16fb5d04ed_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0e3af2884746e1621097dfdb285fa4be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

cygwin1

_impure_ptr
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
free
malloc
memchr
realloc

libpython2.6

PyCFunction_NewEx
PyCode_New
PyDict_New
PyErr_Occurred
PyErr_SetObject
PyErr_SetString
PyExc_BaseException
PyExc_ImportError
PyExc_NameError
PyExc_TypeError
PyFrame_New
PyImport_AddModule
PyIter_Next
PyList_Append
PyList_New
PyList_Type
PyModule_GetDict
PyNumber_Add
PyObject_Call
PyObject_GetAttr
PyObject_GetIter
PyObject_SetAttr
PyObject_SetAttrString
PyString_FromFormat
PyString_FromString
PyString_FromStringAndSize
PyString_InternFromString
PyString_Type
PyTraceBack_Here
PyTuple_New
PyTuple_Type
PyType_IsSubtype
PyUnicodeUCS2_DecodeUTF8
Py_InitModule4
_PyThreadState_Current
_Py_NoneStruct

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

init_chunks_to_lines_pyx

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 344B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e3af2884746e1621097dfdb285fa4be

Headers

File Characteristics

Imports

cygwin1

libpython2.6

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 1KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 344B

.edata Size: 512B - Virtual size: 100B

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 648B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 1KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 344B

.edata
Size: 512B - Virtual size: 100B

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 648B