cb3cc551561883ab8fc4fb6fc837a469_JaffaCakes118

General

Target

cb3cc551561883ab8fc4fb6fc837a469_JaffaCakes118
Size

4.0MB
MD5

cb3cc551561883ab8fc4fb6fc837a469
SHA1

f74ae6d243342099d3fa500cbc630f4a244a8d82
SHA256

ee5d82cd5e61b518572b4415797ee407cff1d28a2e0b43a2baec7236c37695eb
SHA512

b97782f7835949ec41da357cfba598936bc2542fa53c0c8da7f35168f4f0fe19158a5946a297dcc540b7ce0dda8aeacd06f69ac209bd562e58fb31924e8fd7d1
SSDEEP

49152:MgG+0nnFa5xF1Azk6GehC1Vm6ctA6Ty0pQJb4Qate1YdM1TGHgzBut:M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb3cc551561883ab8fc4fb6fc837a469_JaffaCakes118

Files

cb3cc551561883ab8fc4fb6fc837a469_JaffaCakes118
.exe .ps1 windows:6 windows x86 arch:x86 polyglot

0bbcd6443f036d63710b3c873df1ad89

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr120

_initterm_e
_initterm
_acmdln
_fmode
_commode
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
__setusermatherr
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
??3@YAXPAX@Z
_configthreadlocale
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
??1type_info@@UAE@XZ
_calloc_crt
_CxxThrowException
__FrameUnwindFilter

kernel32

EncodePointer
Sleep
LocalFree
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

oleaut32

SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate

mscoree

CLRCreateInstance
_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bbcd6443f036d63710b3c873df1ad89

Headers

DLL Characteristics

File Characteristics

Imports

msvcr120

kernel32

oleaut32

mscoree

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 4.0MB - Virtual size: 4.0MB

.reloc Size: 512B - Virtual size: 476B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 4.0MB - Virtual size: 4.0MB

.reloc
Size: 512B - Virtual size: 476B