16fb44c9f3dc047e66f19c3c9c6faa10_JaffaCakes118

General

Target

16fb44c9f3dc047e66f19c3c9c6faa10_JaffaCakes118
Size

7KB
MD5

16fb44c9f3dc047e66f19c3c9c6faa10
SHA1

4aa8d138c823e81ff1c29224f3c7c5c658e55ed6
SHA256

30001d1a21b5c59afc4260ab0e1b408cf85ed7111e081f5af875752dd5c95728
SHA512

1d6feacafade52ebaf03a91f4f4bb9308db895d0706775bce68e46835a9fa42e204e6f013fb62667d40427e1ddc4600c0bfbb041400cd6e1a3920740a41df2e2
SSDEEP

192:mxX7gNL6036Coo9D2WiMb9kMCSzruVQa6ZasD:uX8Ll3uMaMCSHuV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16fb44c9f3dc047e66f19c3c9c6faa10_JaffaCakes118

Files

16fb44c9f3dc047e66f19c3c9c6faa10_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c526ed2526f4bc1d6b2e21456bc94793

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Users\Sanya\Documents\Visual Studio 2010\Projects\launcherNative\Release\MW2launcher.pdb

Imports

kernel32

WaitForSingleObject
CreateProcessA
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcp100

?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z

msvcr100

__set_app_type
_crt_debugger_hook
_configthreadlocale
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_fmode
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
setlocale
printf
_commode
_controlfp_s
__setusermatherr
memset

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c526ed2526f4bc1d6b2e21456bc94793

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp100

msvcr100

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 512B - Virtual size: 452B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 512B - Virtual size: 452B