78776e277228d4181595cff62d042777_JaffaCakes118

General

Target

78776e277228d4181595cff62d042777_JaffaCakes118
Size

42KB
MD5

78776e277228d4181595cff62d042777
SHA1

134432c81a140e1210ea37557da3ede3d347818e
SHA256

dc37c5133d519bd9b0a69baaba21940391dd068f7549097db4dcda8a87ebfd98
SHA512

7de03b19a0bcf24891624293181b490da64c5e9819a2027cacefad48fb43c08bb8f46056253ef7de76e45e3c88ef649ffbf47f7c80f5b92006b31ff2513258d9
SSDEEP

768:1TuSI7ffhGOIz4ikXsRtkjX6e5dq2XHjo9/uP:NGDfhsztRtkjX7ZXHs/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78776e277228d4181595cff62d042777_JaffaCakes118

Files

78776e277228d4181595cff62d042777_JaffaCakes118
.exe windows:1 windows x86 arch:x86

84d2654b408c981aeb95e348b2c65b62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

crtdll

_errno
_iob
_isatty
atoi
ctime
exit
fflush
fprintf
fputs
free
getenv
_commode_dll
_fmode_dll
_XcptFilter
__GetMainArgs
_except_handler2
_exit
_initterm
printf
putc
putchar
qsort
sprintf
strerror
strrchr
time
malloc
realloc

win32gnu

__stat
argmatch_real
closedir
fnmatch
getgrgid
getgrnam
getopt_long_only_real
getopt_long_real
getopt_real
getopt_state
getpwnam
getpwuid
gnu_getopt_long_only_real
gnu_getopt_long_real
gnu_getopt_real
invalid_arg
opendir
readdir
set_program_name
tb_finish
tb_start

Sections

.text
Size: 11KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

84d2654b408c981aeb95e348b2c65b62

Headers

File Characteristics

Imports

crtdll

win32gnu

Sections

.text Size: 11KB - Virtual size:

.bss Size: 512B - Virtual size:

.rdata Size: 512B - Virtual size:

.data Size: 2KB - Virtual size:

.idata Size: 1KB - Virtual size:

.CRT Size: 512B - Virtual size:

.reloc Size: 25KB - Virtual size: 28KB

.text
Size: 11KB - Virtual size:

.bss
Size: 512B - Virtual size:

.rdata
Size: 512B - Virtual size:

.data
Size: 2KB - Virtual size:

.idata
Size: 1KB - Virtual size:

.CRT
Size: 512B - Virtual size:

.reloc
Size: 25KB - Virtual size: 28KB