fd16b1061004900def1ab7f22511d7b7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd16b1061004900def1ab7f22511d7b7_JaffaCakes118
Size

310KB
MD5

fd16b1061004900def1ab7f22511d7b7
SHA1

3d423d90c1d6b68c6a6e6c17c7a9c91bff0c120d
SHA256

f1e0c5f965db6fc287df11437d264e3abfc4aeb3378c7114099a92185aa1685b
SHA512

6e30e05d44c01f77aba5dac1ddfb4445c9aea51d77739562356fbe2f784955ef1a615602b0b4d680a620e409ebc6c703df23aecfa459aed32c00d42a621c3200
SSDEEP

6144:ap6SDVPErcDtWK355mqn2zTR3NwXy6bkx5Ius/HcsCn6NkBwfJ:ap1DurW4KPn+RdMbMfic1BKJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd16b1061004900def1ab7f22511d7b7_JaffaCakes118

Files

fd16b1061004900def1ab7f22511d7b7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ca948cba1a665dcbc6f8f38c6cf38a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

query

??1CDynStream@@QAE@XZ
?CiNtOpen@@YGPAXPBGKKK@Z
?GetEntryBuffer@CGenericCiProxy@@QAEPAEAAK@Z
?AcceptCommand@CQueryScanner@@QAEXXZ
?OpenRecordForWrites@CPropStoreManager@@QAEPAVCCompositePropRecordForWrites@@KPAE@Z
?Clone@CRestriction@@QBEPAV1@XZ
??0CFilterDaemon@@QAE@AAVCiProxy@@AAVCCiFrameworkParams@@AAVCLangList@@PAEKPAUICiCFilterClient@@@Z
?QueryInterface@CEmptyPropertyList@@UAGJABU_GUID@@PAPAX@Z
?GetUShort@CMemDeSerStream@@UAEGXZ
??1CFileMapView@@QAE@XZ

msvcp60

?pbackfail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
?infinity@?$numeric_limits@D@std@@SADXZ
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?_Init@?$codecvt@GDH@std@@IAEXABV_Locinfo@2@@Z
??_7out_of_range@std@@6B@
?_Infv@?$_Ctr@O@std@@SAOO@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$complex@M@0@ABV10@ABM@Z
??_7bad_cast@std@@6B@
??X?$_Complex_base@M@std@@QAEAAV01@ABM@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z

wship6

WSHGetWildcardSockaddr
WSHOpenSocket2
WSHGetWSAProtocolInfo
WSHGetSockaddrType
WSHOpenSocket
WSHIoctl
WSHStringToAddress
WSHGetProviderGuid
WSHSetSocketInformation
WSHGetWinsockMapping
WSHGetSocketInformation
WSHNotify
WSHAddressToString
WSHJoinLeaf
WSHEnumProtocols

mfcsubs

?AssignCopy@CString@@IAEXHPBG@Z
??M@YG_NABVCString@@PBG@Z
??8@YG_NABVCString@@0@Z
?IsEmpty@CString@@QBEHXZ
?GetData@CString@@IBEPAUCStringData@@XZ
?FreeDataChain@CPlex@@QAEXXZ
??ACString@@QBEGH@Z
?Empty@CString@@QAEXXZ
?SpanIncluding@CString@@QBE?AV1@PBG@Z
?AfxExtractSubString@@YGHAAVCString@@PBGHG@Z
??0CObject@@IAE@XZ
?GetAllocLength@CString@@QBEHXZ
?GetData@CStringArray@@QBEPBVCString@@XZ

kernel32

WritePrivateProfileStringW
GetConsoleAliasExesLengthW
CallNamedPipeA
PostQueuedCompletionStatus
GetCurrentThreadId
GetLogicalDriveStringsA
FindResourceW
LoadLibraryA
VirtualAlloc
GetModuleHandleW
AddConsoleAliasA
GetSystemTimeAsFileTime
EnumDateFormatsW
GetConsoleCommandHistoryLengthA
GetProcAddress
GetComPlusPackageInstallStatus

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 119KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca948cba1a665dcbc6f8f38c6cf38a7a

Headers

File Characteristics

Imports

query

msvcp60

wship6

mfcsubs

kernel32

Sections

.text Size: 141KB - Virtual size: 140KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 119KB - Virtual size: 493KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 141KB - Virtual size: 140KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 119KB - Virtual size: 493KB

.rsrc
Size: 11KB - Virtual size: 11KB