2be5d77bab5209d702f4ce4f94942d67_JaffaCakes118

General

Target

2be5d77bab5209d702f4ce4f94942d67_JaffaCakes118
Size

111KB
MD5

2be5d77bab5209d702f4ce4f94942d67
SHA1

87c961a0b15de98d201f0be7d7acbb95e664f857
SHA256

a12ff5cf57e2b18c01461966d6ea429820c591b1586a13c04fe2d09c97f60cd1
SHA512

5b6e4c4d2b6a41f9a69932df3dde3b8fd2e0b95ceb53c7a8debc2d39b1670a6579e85ab97f4ff579c70d44ab082fe26cd087d12d57c3475ee6c7cd779202cef8
SSDEEP

1536:GuwA/EMeWS14fuw9sEJBq6zPkM5r5pMIZP5GCZvJFOcXAQF2a+ga38QvsS2tJj:GuwAtcusSzPkUrUIZVZvXOnM2a+gSW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2be5d77bab5209d702f4ce4f94942d67_JaffaCakes118

Files

2be5d77bab5209d702f4ce4f94942d67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

940d9deab18b13d4a41d148c264a0349

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_fopen64
_impure_ptr
_stat64
_tzname
abort
atexit
calloc
clock_gettime
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputc
fputs
free
fwrite
getenv
getline
gettimeofday
gmtime
gmtime_r
iswprint
localtime
localtime_r
malloc
mbrlen
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
putenv
realloc
setenv
setlocale
settimeofday
sprintf
strchr
strcmp
strerror_r
strftime
strlen
strncmp
time
tzset
unsetenv
vfprintf

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 624B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

940d9deab18b13d4a41d148c264a0349

Headers

File Characteristics

Imports

cygwin1

cygintl-8

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 624B

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 60KB - Virtual size: 60KB

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 624B

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 60KB - Virtual size: 60KB