2f1f37844d54c066288d1f2d807a83ff_JaffaCakes118

General

Target

2f1f37844d54c066288d1f2d807a83ff_JaffaCakes118
Size

27KB
MD5

2f1f37844d54c066288d1f2d807a83ff
SHA1

5ac11b596a522b8c06375e4671c7767509ea1bf4
SHA256

e05714c6be92545743475f3eb4e3dc7d1dcbfd23e4fa1859e0af7d77625f0ea9
SHA512

67a2e66974eb9122576aa9af07407bc0f233ef7340f2a885ac046040561d14b1a47c446818410bb89fa67f33edffe46f93650317675918eff2555b4e0dafdc00
SSDEEP

384:Wy1Q0sOWxuDepTbyTSrXn9f/Z9upVp49+FemR+WaI/yklzskG2ABycv8I:f1PSSh+r5upVijmozIKEzskG2z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f1f37844d54c066288d1f2d807a83ff_JaffaCakes118

Files

2f1f37844d54c066288d1f2d807a83ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b0a73c19ef488a916a6bcb821cd04fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygice-6

IceAcceptConnection
IceCloseConnection
IceConnectionNumber
IceConnectionStatus
IceFlush
IceGetListenConnectionNumber
IceListenForWellKnownConnections
IceProcessMessages
IceRegisterForProtocolReply
IceSetHostBasedAuthProc
IceSetIOErrorHandler
_IceErrorBadLength
_IceRead
_IceReadSkip

cygwin1

__assert
__errno
__getreent
__main
_fopen64
_impure_ptr
accept
atoi
bind
calloc
close
connect
ctime
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fgets
fprintf
free
fwrite
gethostbyname
gethostname
getpeername
gettimeofday
inet_addr
inet_ntoa
listen
malloc
memcpy
memmove
memset
perror
read
realloc
select
setsockopt
sigaction
sigemptyset
socket
sprintf
strchr
strcmp
strcpy
strdup
strerror
strlen
strtok
swab
sysconf
write

kernel32

GetModuleHandleA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8b0a73c19ef488a916a6bcb821cd04fb

Headers

File Characteristics

Imports

cygice-6

cygwin1

kernel32

Sections

.text Size: 21KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 16B

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 224B

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 16B

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 224B

.idata
Size: 2KB - Virtual size: 1KB