82e34aceac7fefd9d7edba00bb9a60d4_JaffaCakes118

General

Target

82e34aceac7fefd9d7edba00bb9a60d4_JaffaCakes118
Size

47KB
MD5

82e34aceac7fefd9d7edba00bb9a60d4
SHA1

cc31a7f64897423de5b7c00244fe9284efdf3641
SHA256

2a4cf4700f96d3009be49ebf5195d6d8f6d5e7a2279255fa78909b53bca0e57a
SHA512

7a527db971d06b5066177b73b8df396dcdb74296299cd456c3f5691d4f4ba23d0ba6e3483f76256dbe68658d6c39b3548c76c1d1a983838b05adf08062895f5b
SSDEEP

768:e/Hq7QGu2yz8cuqA+zbbVhlP0Eba1iLKMSVTqeJSLqG58H1qUa/TuuXo4c9t8:e/HFGu1HuqA+z1hlP0Eba1XMEDsLH83W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82e34aceac7fefd9d7edba00bb9a60d4_JaffaCakes118

Files

82e34aceac7fefd9d7edba00bb9a60d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f651679b5b670ce910d4acbf74da422c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__getreent
__main
_ctype_
_freopen64
_impure_ptr
access
atoi
calloc
chdir
closedir
cygwin_internal
dll_crt0__FP11per_process
exit
fflush
fprintf
fputs
free
fwrite
getopt
malloc
memset
opendir
optind
printf
putc
puts
readdir
realloc
sprintf
strcat
strchr
strcmp
strcpy
strdup
strlen
strncpy
strrchr

kernel32

GetModuleHandleA

cygncurses-8

_nc_boolcodes
_nc_boolfnames
_nc_boolnames
_nc_doalloc
_nc_find_entry
_nc_first_db
_nc_first_name
_nc_free_termtype
_nc_get_hash_table
_nc_head
_nc_infotocap
_nc_is_dir_path
_nc_is_file_path
_nc_last_db
_nc_name_match
_nc_next_db
_nc_numcodes
_nc_numfnames
_nc_numnames
_nc_read_entry_source
_nc_read_file_entry
_nc_rootname
_nc_set_source
_nc_strcodes
_nc_strfnames
_nc_strnames
_nc_tic_expand
_nc_tracing
_nc_trim_sgr0
_nc_user_definable
_nc_warning
curses_version
_nc_tracing
_nc_tracing
_nc_head
_nc_head
_nc_head
_nc_user_definable
_nc_user_definable
_nc_user_definable
_nc_user_definable
_nc_user_definable
_nc_user_definable

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 368B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 26KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f651679b5b670ce910d4acbf74da422c

Headers

File Characteristics

Imports

cygwin1

kernel32

cygncurses-8

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 16B

.rdata Size: 9KB - Virtual size: 9KB

.bss Size: - Virtual size: 368B

.idata Size: 26KB - Virtual size: 52KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 16B

.rdata
Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 368B

.idata
Size: 26KB - Virtual size: 52KB