a299a8a037a13820070dd86a3a45fba8_JaffaCakes118

General

Target

a299a8a037a13820070dd86a3a45fba8_JaffaCakes118
Size

81KB
MD5

a299a8a037a13820070dd86a3a45fba8
SHA1

0d82a71cedef6822f878a3c6bcf334f65c07a7f3
SHA256

0bc40e977b7dd14a8acf10e1e86941c43f5914ed3c534a155dee56c9727c55cd
SHA512

d02d5c97ee73e294e2f6e2761efc9c7db138316ace8a2395168e77676b4bcffeceb2413e7c5e16b227a693e87bd6d06536f34a6217a0428e67b9bfb955bf10c5
SSDEEP

1536:P4BBrMt+dvrIDzid4jO+gp7lpxn9orQyBJkB5:WG+dDdKjO+IfrocWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a299a8a037a13820070dd86a3a45fba8_JaffaCakes118

Files

a299a8a037a13820070dd86a3a45fba8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c39c30763a967223ae3a05b537aff09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__main
_fopen64
_impure_ptr
_lstat64
calloc
cygwin_conv_to_full_win32_path
cygwin_conv_to_posix_path
cygwin_internal
cygwin_split_path
dll_crt0__FP11per_process
exit
fclose
free
getcwd
getenv
malloc
memset
readlink
realloc
setenv
sprintf
strcasecmp
strcat
strchr
strcpy
strdup
strlen
strncat
strncpy
strpbrk
strrchr
strspn
strtok
vsprintf

kernel32

AllocConsole
CloseHandle
CreatePipe
CreateProcessA
FreeConsole
GetCommTimeouts
GetCommandLineA
GetEnvironmentVariableA
GetExitCodeProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
LoadLibraryA
ReadFile
SetCommTimeouts
SetEnvironmentVariableA
SetHandleInformation
WaitForMultipleObjects
WaitForSingleObject

user32

MessageBoxA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5c39c30763a967223ae3a05b537aff09

Headers

File Characteristics

Imports

cygwin1

kernel32

user32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 16B

.rdata Size: 1024B - Virtual size: 1008B

.bss Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 71KB - Virtual size: 108KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 16B

.rdata
Size: 1024B - Virtual size: 1008B

.bss
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 71KB - Virtual size: 108KB