0d2c1a488533bea968809cccc46cb793_JaffaCakes118

General

Target

0d2c1a488533bea968809cccc46cb793_JaffaCakes118
Size

52KB
MD5

0d2c1a488533bea968809cccc46cb793
SHA1

657c75522112a84f53cf051d877f1bdee611e463
SHA256

da6447b6f057985cdb5cd19926d9b151d825d42c821c8385ab323affe811a9eb
SHA512

1eccfd557aa9be84925e842297bb696971b4264eca0b86b2ef8565f55a20b4b558c14e838932a71973125df689b623acdc4add1fcd82d72406b315b9ca823914
SSDEEP

768:q36ZrLZqoxC2gz7oDWxzd3DvRZksftPSziSXUAqQS2NioC2:9rLdJgzkDWxzd3DvPkuSz4AqQS2Nr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d2c1a488533bea968809cccc46cb793_JaffaCakes118

Files

0d2c1a488533bea968809cccc46cb793_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9c9382a3e012537b0687bd912537229

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalFree
VirtualFree
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
Sleep
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetStartupInfoA

user32

FindWindowA
GetWindowThreadProcessId

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD0@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ

msvcrt

_controlfp
__CxxFrameHandler
memcpy
??2@YAPAXI@Z
_except_handler3
strcmp
free
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9c9382a3e012537b0687bd912537229

Headers

File Characteristics

Imports

kernel32

user32

msvcp60

msvcrt

Sections

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 4KB

.rsrc Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 36KB - Virtual size: 32KB