76fce684122a195d69038608576809ae_JaffaCakes118

General

Target

76fce684122a195d69038608576809ae_JaffaCakes118
Size

411KB
MD5

76fce684122a195d69038608576809ae
SHA1

5922a9cb0a6674f0ba3cc988edfaef2ce805d642
SHA256

1acbf42ff7645e05a8ad09093842ed4a5d7bfd7b282a1261fad3d2e3cc88c80d
SHA512

0d6c2cabbed1dc1e1794574f89639d2afcf894a873f9acbf0e121231862e8fd6f25b3b1b84207e8f949507141a49e8fc48eb0ad785e2b423541bbb13d5724ac8
SSDEEP

6144:jOXgqbzUES0TpE7uw33zgzNBNgBC5XeO+Q1mTNKKHUPqxxYHANSRAk5:jwgqfUV0TpE7uw33zMfMVQ6NKijx65

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76fce684122a195d69038608576809ae_JaffaCakes118

Files

76fce684122a195d69038608576809ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f26c088c87aac8567997dbea19409d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

__errno
__main
_ctype_
_exit
_geteuid32
_getuid32
_open64
_stat64
abort
accept
atoi
atol
bind
calloc
close
connect
cygwin_internal
dll_crt0__FP11per_process
execl
exit
fcntl
fork
free
gethostbyname
getpid
getppid
getsockname
htonl
htons
inet_ntoa
listen
localtime
malloc
memcmp
memcpy
memset
ntohl
ntohs
printf
pthread_atfork
rand
read
realloc
recvfrom
select
sendto
setsid
setsockopt
signal
snprintf
socket
sprintf
srand
sscanf
strcasecmp
strchr
strcmp
strcpy
strlen
strncasecmp
strncmp
strncpy
strpbrk
strstr
time
unlink
usleep
vsprintf
waitpid
write

kernel32

AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f26c088c87aac8567997dbea19409d9

Headers

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 161KB - Virtual size: 161KB

.data Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 12KB

.idata Size: 2KB - Virtual size: 1KB

.stab Size: 164KB - Virtual size: 163KB

.stabstr Size: 42KB - Virtual size: 41KB

.text
Size: 161KB - Virtual size: 161KB

.data
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 12KB

.idata
Size: 2KB - Virtual size: 1KB

.stab
Size: 164KB - Virtual size: 163KB

.stabstr
Size: 42KB - Virtual size: 41KB