67530bd50c26c00a71de37a8d20698fe_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

67530bd50c26c00a71de37a8d20698fe_JaffaCakes118
Size

65KB
MD5

67530bd50c26c00a71de37a8d20698fe
SHA1

9a8007f903f244fc9963592c79989d1764f7e200
SHA256

900ba8d6e5909b2a9a40a83bf4148f5cfd70902cc998f6a369b5ef7f6ffe2acf
SHA512

d7bd25f7a9b55883ecdcf43348a9c3dc85115de167791675685af4946ab46158a9963aebd199eb7bf6b9c35d34fd46767c3503fba5116f9a06bdb3de74124642
SSDEEP

768:cNlRPknJPJGS+EUjN6bvyZB0LPCwvtrAc5ZPvO7jascNte6s/2bEX/ErCUO93pb2:A8tJGubvyZB0fWT1tvEiNRzHN1REh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67530bd50c26c00a71de37a8d20698fe_JaffaCakes118

Files

67530bd50c26c00a71de37a8d20698fe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

136d8ad898b504dbadec231c6b87cbc7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

cyggcc_s-1

__deregister_frame_info
__register_frame_info

cygwin1

__assert_func
__ctype_ptr__
__errno
__getreent
_fcntl64
_fopen64
_impure_ptr
abort
calloc
close
connect
cygwin_create_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fclose
fgetc
fprintf
fputc
free
fwrite
getenv
getservbyname
getservbyport
in6addr_any
ioctl
malloc
memcpy
memset
realloc
recvfrom
select
sendto
snprintf
socket
sprintf
strcasecmp
strchr
strcpy
strdup
strlen
strncpy
strtok
strtol
strtoul
time
vsnprintf
vsprintf

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

iphlpapi

GetNetworkParams

kernel32

GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStdHandle
GlobalAlloc
GlobalFree
VirtualProtect
VirtualQuery
WriteFile

Exports

Exports

generic_lwres_conf_parse
get_win32_searchlist
lwres__print_snprintf
lwres__print_sprintf
lwres__print_vsnprintf
lwres_addr_parse
lwres_buffer_add
lwres_buffer_back
lwres_buffer_clear
lwres_buffer_first
lwres_buffer_forward
lwres_buffer_getmem
lwres_buffer_getuint16
lwres_buffer_getuint32
lwres_buffer_getuint8
lwres_buffer_init
lwres_buffer_invalidate
lwres_buffer_putmem
lwres_buffer_putuint16
lwres_buffer_putuint32
lwres_buffer_putuint8
lwres_buffer_subtract
lwres_conf_clear
lwres_conf_get
lwres_conf_init
lwres_conf_parse
lwres_conf_print
lwres_context_allocmem
lwres_context_create
lwres_context_destroy
lwres_context_freemem
lwres_context_getsocket
lwres_context_initserial
lwres_context_nextserial
lwres_context_recv
lwres_context_send
lwres_context_sendrecv
lwres_data_parse
lwres_endhostent
lwres_endhostent_r
lwres_freeaddrinfo
lwres_freehostent
lwres_freerrset
lwres_gabnrequest_free
lwres_gabnrequest_parse
lwres_gabnrequest_render
lwres_gabnresponse_free
lwres_gabnresponse_parse
lwres_gabnresponse_render
lwres_gai_strerror
lwres_getaddrinfo
lwres_getaddrsbyname
lwres_gethostbyaddr
lwres_gethostbyaddr_r
lwres_gethostbyname
lwres_gethostbyname2
lwres_gethostbyname_r
lwres_gethostent
lwres_gethostent_r
lwres_getipnodebyaddr
lwres_getipnodebyname
lwres_getnamebyaddr
lwres_getnameinfo
lwres_getrdatabyname
lwres_getrrsetbyname
lwres_gnbarequest_free
lwres_gnbarequest_parse
lwres_gnbarequest_render
lwres_gnbaresponse_free
lwres_gnbaresponse_parse
lwres_gnbaresponse_render
lwres_grbnrequest_free
lwres_grbnrequest_parse
lwres_grbnrequest_render
lwres_grbnresponse_free
lwres_grbnresponse_parse
lwres_grbnresponse_render
lwres_h_errno
lwres_herror
lwres_hstrerror
lwres_libage
lwres_libinterface
lwres_librevision
lwres_lwpacket_parseheader
lwres_lwpacket_renderheader
lwres_net_aton
lwres_net_ntop
lwres_net_pton
lwres_nooprequest_free
lwres_nooprequest_parse
lwres_nooprequest_render
lwres_noopresponse_free
lwres_noopresponse_parse
lwres_noopresponse_render
lwres_resolv_conf
lwres_sethostent
lwres_sethostent_r
lwres_string_parse
lwres_strtoul
lwres_udp_port
lwres_version

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 324B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

136d8ad898b504dbadec231c6b87cbc7

Headers

DLL Characteristics

File Characteristics

Imports

cyggcc_s-1

cygwin1

advapi32

iphlpapi

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 7KB - Virtual size: 6KB

.rdata Size: 512B - Virtual size: 36B

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 324B

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 7KB - Virtual size: 6KB

.rdata
Size: 512B - Virtual size: 36B

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 324B

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB