5385ed28d1ae64a480205b9cba0b2970_JaffaCakes118

General

Target

5385ed28d1ae64a480205b9cba0b2970_JaffaCakes118
Size

99KB
MD5

5385ed28d1ae64a480205b9cba0b2970
SHA1

d39bf6089c07eb042f7fbc6ece44af21650bb1d5
SHA256

7a07560644f466ae837efa9716855f55fff78e418e96deb0b8a37e3eea2bf93f
SHA512

ed422aa49a36d4fb9c944be96406d5a7f4ba9a29b26ff1ecf5af203d3208b60870c417b2b41aef6070f296cf855f59c4ecd6c02a97e39e82216a845c81f9cffc
SSDEEP

1536:cBglzLFPT/MTszFIMtwFWpUVXCIAzJka/kL5cPbzf+1P3fh:c09DMTsyQwFkUVXXAzJkrcPbzf+ffh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5385ed28d1ae64a480205b9cba0b2970_JaffaCakes118

Files

5385ed28d1ae64a480205b9cba0b2970_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cae804205c7039b52c827ce397b47cc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
__mb_cur_max
_acl32
_ctype_
_exit
_fstat64
_getgrgid32
_getgrnam32
_getpwuid32
_impure_ptr
_lstat64
_stat64
_tzname
abort
access
atexit
btowc
calloc
chmod
clock_gettime
closedir
cygwin_internal
dirfd
dll_crt0__FP11per_process
exit
fchmod
fclose
fflush
fprintf
fputs
free
fwrite
getenv
getpwnam
gettimeofday
gmtime_r
ioctl
isatty
iswcntrl
iswctype
iswprint
localeconv
localtime
localtime_r
longjmp
malloc
mbrlen
mbrtowc
mbsinit
mbsrtowcs
memchr
memcpy
memmove
mempcpy
memset
opendir
printf
putc_unlocked
putchar_unlocked
qsort
raise
readdir
readlink
realloc
setjmp
setlocale
sigaction
sigaddset
sigemptyset
sigismember
signal
sigprocmask
sprintf
strcat
strchr
strcmp
strcoll
strcpy
strdup
strerror_r
strftime
strlen
strncmp
strncpy
strndup
strrchr
strtoul
strtoumax
tcgetpgrp
towlower
tzset
vfprintf
wcscat
wcslen
wctype
wcwidth
wmemchr
wmemcpy

cygintl-8

libintl_bindtextdomain
libintl_dcgettext
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cae804205c7039b52c827ce397b47cc3

Headers

File Characteristics

Imports

cygwin1

cygintl-8

kernel32

Sections

.text Size: 73KB - Virtual size: 72KB

.data Size: 1024B - Virtual size: 608B

.rdata Size: 17KB - Virtual size: 17KB

.bss Size: - Virtual size: 1KB

.idata Size: 7KB - Virtual size: 12KB

.text
Size: 73KB - Virtual size: 72KB

.data
Size: 1024B - Virtual size: 608B

.rdata
Size: 17KB - Virtual size: 17KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 7KB - Virtual size: 12KB