18389f67ce86aa73f91a152b74895b94_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

18389f67ce86aa73f91a152b74895b94_JaffaCakes118
Size

237KB
MD5

18389f67ce86aa73f91a152b74895b94
SHA1

e873fa06f21e4ae65091003b3784f939c617a4e2
SHA256

e27ecc3cc4eda780fa88fb69ee74b5af72ad8c9d519156acad0b3ef5ff7b9ba3
SHA512

484c05c5bd2312da022c2e7fc46cb45c395a966f39aeb598b94deac149a77273b434b3050b76d48743e1a9095d1763dd62905328d63c7c8d306a5bdcd7a94519
SSDEEP

3072:fAuz9iZn61xXoIKmCe/07P/wp7APW8M15bVP36uz:fpFoIKm10OeW7xv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18389f67ce86aa73f91a152b74895b94_JaffaCakes118

Files

18389f67ce86aa73f91a152b74895b94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a3d133498777c2fa6dea4f1ef25a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

__assert
__errno
__getreent
__main
__progname
_fstat64
_geteuid32
_getpwuid32
_lseek64
_open64
_setgid32
_setgroups32
_setuid32
_stat64
_truncate64
abort
accept
alarm
atof
atoi
atol
bind
calloc
chdir
chroot
close
closedir
connect
cygwin_internal
dll_crt0__FP11per_process
dup
exit
fcntl
fflush
fileno
fork
fprintf
fputc
free
fwrite
getenv
gethostbyname
getpeername
getpid
getpwnam
getrlimit
getrusage
getsockname
getsockopt
gettimeofday
ioctl
link
listen
localtime
malloc
memset
opendir
posix_regcomp
posix_regexec
printf
pthread_mutex_lock
pthread_mutex_unlock
putchar
puts
raise
rand
read
readdir
realloc
rename
select
setrlimit
setsid
setsockopt
shutdown
sigaction
sigaddset
sigemptyset
sigfillset
signal
sigprocmask
snprintf
socket
srand
sscanf
strcasecmp
strchr
strcmp
strcpy
strerror
strftime
strlen
strncat
strncmp
strncpy
strsignal
strstr
strtoul
time
uname
unlink
usleep
vfprintf
vprintf
vsnprintf
write

kernel32

AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a3d133498777c2fa6dea4f1ef25a2da

Headers

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 187KB - Virtual size: 186KB

.data Size: 1024B - Virtual size: 944B

.rdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 16KB

.idata Size: 3KB - Virtual size: 3KB

.stab Size: 3KB - Virtual size: 2KB

.stabstr Size: 4KB - Virtual size: 4KB

.text
Size: 187KB - Virtual size: 186KB

.data
Size: 1024B - Virtual size: 944B

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 16KB

.idata
Size: 3KB - Virtual size: 3KB

.stab
Size: 3KB - Virtual size: 2KB

.stabstr
Size: 4KB - Virtual size: 4KB