cf61f1e24cd92b490dcb3bd9d9c8b54f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

cf61f1e24cd92b490dcb3bd9d9c8b54f_JaffaCakes118
Size

115KB
MD5

cf61f1e24cd92b490dcb3bd9d9c8b54f
SHA1

97ecdc049c24070f9ab8e8425895e9e744b33bf4
SHA256

d08cdbd0a46314dfab8a49f5ea5a3ec766d3f42ebf6b9654b9a7824331ca5593
SHA512

702a743531f59ade15a167de8690a5397d7641aef6663cfc57010ff33a3a7e77345a41f60b7b4ccc143bea91b5c023d66afa682da6fc4115156d418c804eb9ad
SSDEEP

1536:eBglzLFPT/MTszFIMtwFWpUVXCIAzJka/kL5ccbzf+1P3zY2tNM5yQ:e09DMTsyQwFkUVXXAzJkrccbzf+fzY2A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf61f1e24cd92b490dcb3bd9d9c8b54f_JaffaCakes118

Files

cf61f1e24cd92b490dcb3bd9d9c8b54f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cae804205c7039b52c827ce397b47cc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
__mb_cur_max
_acl32
_ctype_
_exit
_fstat64
_getgrgid32
_getgrnam32
_getpwuid32
_impure_ptr
_lstat64
_stat64
_tzname
abort
access
atexit
btowc
calloc
chmod
clock_gettime
closedir
cygwin_internal
dirfd
dll_crt0__FP11per_process
exit
fchmod
fclose
fflush
fprintf
fputs
free
fwrite
getenv
getpwnam
gettimeofday
gmtime_r
ioctl
isatty
iswcntrl
iswctype
iswprint
localeconv
localtime
localtime_r
longjmp
malloc
mbrlen
mbrtowc
mbsinit
mbsrtowcs
memchr
memcpy
memmove
mempcpy
memset
opendir
printf
putc_unlocked
putchar_unlocked
qsort
raise
readdir
readlink
realloc
setjmp
setlocale
sigaction
sigaddset
sigemptyset
sigismember
signal
sigprocmask
sprintf
strcat
strchr
strcmp
strcoll
strcpy
strdup
strerror_r
strftime
strlen
strncmp
strncpy
strndup
strrchr
strtoul
strtoumax
tcgetpgrp
towlower
tzset
vfprintf
wcscat
wcslen
wctype
wcwidth
wmemchr
wmemcpy

cygintl-8

libintl_bindtextdomain
libintl_dcgettext
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cae804205c7039b52c827ce397b47cc3

Headers

File Characteristics

Imports

cygwin1

cygintl-8

kernel32

Sections

.text Size: 73KB - Virtual size: 72KB

.data Size: 1024B - Virtual size: 608B

.rdata Size: 17KB - Virtual size: 17KB

.bss Size: - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 2KB

.rdata Size: 20KB - Virtual size: 20KB

.text
Size: 73KB - Virtual size: 72KB

.data
Size: 1024B - Virtual size: 608B

.rdata
Size: 17KB - Virtual size: 17KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 2KB

.rdata
Size: 20KB - Virtual size: 20KB