79024c8afc822d7e9d7e805c30008486_JaffaCakes118

General

Target

79024c8afc822d7e9d7e805c30008486_JaffaCakes118
Size

219KB
MD5

79024c8afc822d7e9d7e805c30008486
SHA1

0c8823cd4df34c9560ebf473e3972fc8d0c650ad
SHA256

f9130ed36f10207c4f89fb98c946048d40eebcc03ac6a17dc623814f98e9ab49
SHA512

9b1e9393d7505e8bffe42cf6481e27a5a8c78200e56dfbc92ddca817044008bc05445cec9abf0fb8cc9bfb8d921576158e96f7efc6621efaaa516c35255c99ad
SSDEEP

3072:gk3Nr//LZLj2O2TPCaHPJuSYFJIkcZzH7uIyScmTs1MK/xFxa7jlH1duTA:gIr//LwfoFCkhScmTCL/xFxa7jlH17

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79024c8afc822d7e9d7e805c30008486_JaffaCakes118

Files

79024c8afc822d7e9d7e805c30008486_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1812ced97cbf5912ef68590bd75b66a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED

Imports

cygwin1

__errno
__main
_ctype_
abort
accept
alarm
atof
atoi
atol
bind
calloc
close
closedir
connect
cygwin_internal
dll_crt0__FP11per_process
dup
exit
fclose
fflush
fgets
fopen
fork
fprintf
free
fstat
fwrite
geteuid
gethostbyname
getpeername
getpid
getpwuid
getrusage
getsockname
getsockopt
ioctl
listen
localtime
lseek
malloc
memset
open
opendir
printf
pthread_mutex_lock
pthread_mutex_unlock
putchar
puts
rand
read
readdir
realloc
rename
select
setsid
setsockopt
signal
snprintf
socket
srand
sscanf
stat
strcasecmp
strcmp
strcpy
strdup
strftime
strlen
strncat
strncpy
strtoul
time
truncate
uname
unlink
usleep
vsnprintf
write

cygregex

regcomp
regexec

kernel32

AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 89KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1812ced97cbf5912ef68590bd75b66a4

Headers

File Characteristics

Imports

cygwin1

cygregex

kernel32

Sections

.text Size: 177KB - Virtual size: 176KB

.data Size: 1024B - Virtual size: 928B

.rdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 89KB

.idata Size: 2KB - Virtual size: 2KB

.stab Size: 3KB - Virtual size: 2KB

.stabstr Size: 4KB - Virtual size: 4KB

.text
Size: 177KB - Virtual size: 176KB

.data
Size: 1024B - Virtual size: 928B

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 89KB

.idata
Size: 2KB - Virtual size: 2KB

.stab
Size: 3KB - Virtual size: 2KB

.stabstr
Size: 4KB - Virtual size: 4KB