a1a1e39c618c29dfb2dbf6d44c5def00_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a1a1e39c618c29dfb2dbf6d44c5def00_JaffaCakes118
Size

125KB
MD5

a1a1e39c618c29dfb2dbf6d44c5def00
SHA1

4bdcac2b7b50a77f349e00180c9392825d572923
SHA256

43235244beddef639c56f4662686e43b0b3458e82af3be3d49851bfdd028b705
SHA512

4e423af2e5b21283d67f489ac35dd4ea0c564650c216b923db59dc14d7f21b2fe736fcf03769e4e817fa51b37e79ec96f35f57e6262a87125e6ff28a0da06d10
SSDEEP

1536:tytVYnnMl4EBR22222VWpCX3w55TnsnS4AKI+CplIBU7MwR4vx/kjS59jYXW0/Pd:8AnnMzh5BnvPQvxch3Qjs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1a1e39c618c29dfb2dbf6d44c5def00_JaffaCakes118

Files

a1a1e39c618c29dfb2dbf6d44c5def00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f63cc73fa1c7f1e51326c1e8e534a9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

__getreent
__main
_dll_crt0@0
_fopen64
_fstat64
_impure_ptr
_mmap64
_open64
_stat64
calloc
chdir
close
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fclose
fprintf
fread
free
fwrite
getenv
malloc
memcpy
memset
opendir
perror
printf
putchar
readdir
realloc
snprintf
strlen
strncmp
strncpy
strrchr
strstr
vsnprintf

cygz

compress
compressBound
inflate
inflateEnd
inflateInit_

cyggcc_s-1

__deregister_frame_info
__register_frame_info

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 192B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 1024B - Virtual size: 942B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/83
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/96
Size: 512B - Virtual size: 113B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/107
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/118
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f63cc73fa1c7f1e51326c1e8e534a9f

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

cygz

cyggcc_s-1

kernel32

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 11KB - Virtual size: 11KB

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 9KB

.idata Size: 1KB - Virtual size: 1KB

/14 Size: 512B - Virtual size: 192B

/29 Size: 1024B - Virtual size: 942B

/45 Size: 34KB - Virtual size: 33KB

/57 Size: 4KB - Virtual size: 3KB

/71 Size: 6KB - Virtual size: 6KB

/83 Size: 2KB - Virtual size: 1KB

/96 Size: 512B - Virtual size: 113B

/107 Size: 11KB - Virtual size: 10KB

/118 Size: 6KB - Virtual size: 5KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 11KB - Virtual size: 11KB

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 9KB

.idata
Size: 1KB - Virtual size: 1KB

/14
Size: 512B - Virtual size: 192B

/29
Size: 1024B - Virtual size: 942B

/45
Size: 34KB - Virtual size: 33KB

/57
Size: 4KB - Virtual size: 3KB

/71
Size: 6KB - Virtual size: 6KB

/83
Size: 2KB - Virtual size: 1KB

/96
Size: 512B - Virtual size: 113B

/107
Size: 11KB - Virtual size: 10KB

/118
Size: 6KB - Virtual size: 5KB