e2a8b3ff830911f00b9a745599aceb2a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e2a8b3ff830911f00b9a745599aceb2a_JaffaCakes118
Size

83KB
MD5

e2a8b3ff830911f00b9a745599aceb2a
SHA1

c80702490d31fb4776942776bf9c28e6e129694e
SHA256

1df9f69e64d42aa346d3c63f5cea2945ce541ba6e8fa1ed59beef4b2aa51f646
SHA512

c2632e5868a4c6d66d6078ad8a08af615f3e65f8cdf48bc173a9b83bf812b9333bd4e99438527278feec027bfb3f28e579a9b2bc040617c742121e365b96c5fb
SSDEEP

1536:4dwIgeFKejrn6QYca+de8IdCnqVhXlsVSfe/AxQHMOs4xc9tBlE:DaFzzs8IdXlESSV1sO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2a8b3ff830911f00b9a745599aceb2a_JaffaCakes118

Files

e2a8b3ff830911f00b9a745599aceb2a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d802b687450bc3b2f2151356b7637206

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FoldStringW
BaseFlushAppcompatCache
SetConsoleActiveScreenBuffer
SetVolumeMountPointA
VirtualAlloc
UTRegister
_hread
GetCurrentProcessId
SetVolumeLabelW
GetProcessId
IsBadReadPtr
HeapFree
CreateFiber
DebugActiveProcessStop
RemoveLocalAlternateComputerNameW
EnterCriticalSection
WritePrivateProfileStructW
VDMOperationStarted

msvcrt40

?pword@ios@@QBEAAPAXH@Z
_logb
strncmp
?getdouble@istream@@AAEHPADH@Z
_memicmp
??4istrstream@@QAEAAV0@ABV0@@Z
_mbslwr
?is_open@ifstream@@QBEHXZ
signal
_wgetcwd
?close@ofstream@@QAEXXZ
?pbump@streambuf@@IAEXH@Z
?cin@@3Vistream_withassign@@A

msvcp60

?_Doraise@overflow_error@std@@MBEXXZ
?date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBEHXZ
?setstate@ios_base@std@@QAEXF@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@@Z
?open@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXPBDF@Z
??1?$collate@D@std@@UAE@XZ
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?id@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
?_Init@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z

msvcirt

??4filebuf@@QAEAAV0@ABV0@@Z
??5istream@@QAEAAV0@AAI@Z
??_Dostream@@QAEXXZ
??6ostream@@QAEAAV0@PAVstreambuf@@@Z
??_7ifstream@@6B@
??_8istrstream@@7B@
??5istream@@QAEAAV0@AAH@Z
??_Eifstream@@UAEPAXI@Z
?what@exception@@UBEPBDXZ
?fail@ios@@QBEHXZ
??_Dstdiostream@@QAEXXZ
?get@istream@@QAEAAV1@PACHD@Z
??0iostream@@IAE@XZ

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d802b687450bc3b2f2151356b7637206

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt40

msvcp60

msvcirt

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 19KB - Virtual size: 25KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 512B - Virtual size: 280B

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 19KB - Virtual size: 25KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 512B - Virtual size: 280B