dea55b31602bf08b0a01f7957e5eff0c_JaffaCakes118

General

Target

dea55b31602bf08b0a01f7957e5eff0c_JaffaCakes118
Size

127KB
MD5

dea55b31602bf08b0a01f7957e5eff0c
SHA1

e25dbd13e00bd7f8d0310c70ec7ecec9e2de751f
SHA256

f7cfa44fd77c21c8674658205f94ac02132ca7b00475a4abc93eb5f898201a52
SHA512

6db650cc32d88b87c50792d3c8a39ff28ab5778c22050b6097d65c4dad0bb8f73ada8a80ed5c2ff15a01184b03e24d24ebe95f9e1a2fe38d2cdedb90b5842fd5
SSDEEP

3072:rgx/4ImqRNZtzKWpWL441ewpbpxhhzygZR9hPUsVOdTO8v0J:rg9xmqRloewp7l3rUQOx4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea55b31602bf08b0a01f7957e5eff0c_JaffaCakes118

Files

dea55b31602bf08b0a01f7957e5eff0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

704d50ef23d5d9ea1bb7a1194b98f8b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
__mb_cur_max
_acl32
_chown32
_ctype_
_exit
_fchown32
_fcntl64
_fstat64
_ftruncate64
_getegid32
_geteuid32
_getgid32
_getgrnam32
_getuid32
_impure_ptr
_lchown32
_lseek64
_lstat64
_mknod32
_open64
_setregid32
_setreuid32
_stat64
abort
access
atexit
btowc
calloc
chdir
chmod
close
closedir
cygwin_internal
dll_crt0__FP11per_process
dup
endgrent
endpwent
execlp
exit
fchdir
fchmod
fclose
fflush
fork
fprintf
fputs
free
futimes
getcwd
getenv
getline
getpagesize
getpwnam
iswalnum
iswctype
iswlower
iswprint
link
malloc
mbrtowc
mbsinit
memchr
memcpy
memmove
mempcpy
memset
mkdir
nl_langinfo
opendir
pathconf
printf
putc_unlocked
putchar_unlocked
raise
read
readdir
readlink
realloc
rename
rmdir
setlocale
signal
sprintf
strcasecmp
strchr
strcmp
strcpy
strerror_r
strlen
strncmp
strndup
strspn
strtoul
symlink
towlower
towupper
umask
unlink
utimes
vfprintf
wait
waitpid
wcrtomb
wcscoll
wctype
write

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 864B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 27KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

704d50ef23d5d9ea1bb7a1194b98f8b4

Headers

File Characteristics

Imports

cygwin1

cygintl-8

kernel32

Sections

.text Size: 103KB - Virtual size: 103KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 11KB - Virtual size: 10KB

.bss Size: - Virtual size: 864B

.idata Size: 27KB - Virtual size: 52KB

.text
Size: 103KB - Virtual size: 103KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 11KB - Virtual size: 10KB

.bss
Size: - Virtual size: 864B

.idata
Size: 27KB - Virtual size: 52KB