a322bca5003a69e11b82f8d5812c0ab6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a322bca5003a69e11b82f8d5812c0ab6_JaffaCakes118
Size

156KB
MD5

a322bca5003a69e11b82f8d5812c0ab6
SHA1

8b6709825712857585e9c6081387169c43d2008d
SHA256

0a39d2f39bc9c60ff6ff3c993f9eb84552d07916da787f997324b5758697a31c
SHA512

4e794491d153f8123a11d9ee7f95a3f77e4ee3dd5261a91387752ae194faf19d460da21ed9cc3b63dab09b060f5322d73efbb72d5b3cffb7c7d925108ec18d0b
SSDEEP

3072:EQdjapivqdBaYUScvHPGB0BBTO8PDHINZMm8d0li+k227Htue:tdjI4qdsYOHPGB0BBTO8PD6ZMmo+khDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a322bca5003a69e11b82f8d5812c0ab6_JaffaCakes118

Files

a322bca5003a69e11b82f8d5812c0ab6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb495c3668fd2e2ccb831df2dc17320

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libgimp-2.0-0

gimp_drawable_detach
gimp_drawable_flush
gimp_drawable_get
gimp_image_attach_parasite
gimp_image_convert_rgb
gimp_image_height
gimp_image_insert_layer
gimp_image_new
gimp_image_set_colormap
gimp_image_set_filename
gimp_image_width
gimp_install_procedure
gimp_layer_new
gimp_layer_translate
gimp_main
gimp_pixel_rgn_init
gimp_pixel_rgn_set_rect
gimp_progress_init_printf
gimp_progress_pulse
gimp_progress_set_text_printf
gimp_progress_update
gimp_quit
gimp_register_file_handler_mime
gimp_register_magic_load_handler
gimp_register_thumbnail_loader

libgimpbase-2.0-0

gimp_filename_to_utf8
gimp_locale_directory
gimp_parasite_free
gimp_parasite_new

libintl-8

libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_sprintf
libintl_textdomain

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
calloc
fread
free
fwrite
signal
strncpy
vfprintf

libglib-2.0-0

g_file_error_from_errno
g_file_error_quark
g_fopen
g_free
g_log
g_malloc
g_print
g_printerr
g_set_error
g_strconcat
g_strdup
g_strdup_printf
g_strerror
g_utf8_validate

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 67KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/87
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/123
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/134
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fb495c3668fd2e2ccb831df2dc17320

Headers

File Characteristics

Imports

libgimp-2.0-0

libgimpbase-2.0-0

libintl-8

kernel32

msvcrt

libglib-2.0-0

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 2KB - Virtual size: 2KB

/4 Size: 1024B - Virtual size: 856B

.bss Size: - Virtual size: 67KB

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 68KB - Virtual size: 68KB

/14 Size: 512B - Virtual size: 264B

/29 Size: 1024B - Virtual size: 904B

/45 Size: 1KB - Virtual size: 1KB

/61 Size: 18KB - Virtual size: 18KB

/73 Size: 3KB - Virtual size: 3KB

/87 Size: 3KB - Virtual size: 3KB

/99 Size: 1024B - Virtual size: 964B

/112 Size: 512B - Virtual size: 328B

/123 Size: 8KB - Virtual size: 8KB

/134 Size: 512B - Virtual size: 296B

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 2KB - Virtual size: 2KB

/4
Size: 1024B - Virtual size: 856B

.bss
Size: - Virtual size: 67KB

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 68KB - Virtual size: 68KB

/14
Size: 512B - Virtual size: 264B

/29
Size: 1024B - Virtual size: 904B

/45
Size: 1KB - Virtual size: 1KB

/61
Size: 18KB - Virtual size: 18KB

/73
Size: 3KB - Virtual size: 3KB

/87
Size: 3KB - Virtual size: 3KB

/99
Size: 1024B - Virtual size: 964B

/112
Size: 512B - Virtual size: 328B

/123
Size: 8KB - Virtual size: 8KB

/134
Size: 512B - Virtual size: 296B