aef03ddd3134451e1efe137fb22e3a0c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

aef03ddd3134451e1efe137fb22e3a0c_JaffaCakes118
Size

531KB
MD5

aef03ddd3134451e1efe137fb22e3a0c
SHA1

09d7afd49f836d4de22b96792de47ff50abb7ead
SHA256

d5efc42f10137cb465bcc098f0a3f5440a86ae59059526c6fb4bfce46bf1be83
SHA512

1fc053f05d666242a87bfd6c7ce29c4b5679bc7bc72ca1363e646c2ccb2440d57144e511ecfc308992056f9c40e5fc53b15d6d0e5e4c11691595065a9c827b15
SSDEEP

6144:eOhqvV1XRn7MpSBYTwUdVe4bKwpF+bBBTQWwTUwWUkgV:IV74YYwUDvz+PTaUdjg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
aef03ddd3134451e1efe137fb22e3a0c_JaffaCakes118

Files

aef03ddd3134451e1efe137fb22e3a0c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e7c02b871ee88e537a5742f8ddffcb0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Mr.Anderson\Documents\Visual Studio 2008\Projects\Anderson\Release\Anderson.pdb

Imports

shlwapi

PathCombineW
ord219
SHStrDupW

propsys

PSGetPropertyDescriptionListFromString
PSCreateMemoryPropertyStore
PropVariantToString
PSGetNameFromPropertyKey

comctl32

ord344
ord345

kernel32

GetTickCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
WriteFile
WideCharToMultiByte
CopyFileW
FreeConsole
CreateFileW
GetLastError
CloseHandle
SetFilePointer
Sleep
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange

advapi32

CryptAcquireContextA

shell32

SHGetPropertyStoreFromParsingName
SHGetKnownFolderPath

ole32

CoUninitialize
PropVariantClear
CoTaskMemFree
CoInitializeEx
CoCreateInstance

msvcp90

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

msvcr90

memset
_invoke_watson
_controlfp_s
_except_handler4_common
_decode_pointer
malloc
atoi
??_V@YAXPAX@Z
_vsnwprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z
yuAAQERWEARDFGSFdgtgfgSZXAWQFAs

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7c02b871ee88e537a5742f8ddffcb0c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

propsys

comctl32

kernel32

advapi32

shell32

ole32

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 506KB - Virtual size: 505KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 506KB - Virtual size: 505KB

.reloc
Size: 3KB - Virtual size: 3KB