193268cd48bdf15d1c21995216f8f244_JaffaCakes118

General

Target

193268cd48bdf15d1c21995216f8f244_JaffaCakes118
Size

115KB
MD5

193268cd48bdf15d1c21995216f8f244
SHA1

2fdffdb6bd4870e5c89d4afcbc0c91dd85ced606
SHA256

6221423e7365ce805a26f83d1bfa3a43a587634ca0b9f738d4cab7e9e8535a6c
SHA512

750f0c012e5a342d8097843fe2f38fe36f9c0d8d4ba6bfcfce03291ce32dc73bd892ca2273f0f469ff86a60462fbb2a9e8e70d0e0aa41adbb89cd9ac937c4a76
SSDEEP

1536:O+eZRkBA22utRPjE7mSg/4lGPbJ7dlcNQsfMsqFezqhP2pgy3hDW0O5LzUMn:OgRLbdlSQOMsqFedBhy0OHn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
193268cd48bdf15d1c21995216f8f244_JaffaCakes118

Files

193268cd48bdf15d1c21995216f8f244_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4ab50040bfa175d670c83c569e6ffa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

ICSendMessage

kernel32

RaiseException
GetProcAddress
LoadLibraryA
CloseHandle
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
GetLastError

msvcrt

malloc
strcmp
free
_except_handler3
strrchr
rename
atoi
strncmp
strncpy
strcat
_errno
memmove
_strupr
strchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memcmp
strlen
strcpy
strstr
_ftol
calloc
ceil
__CxxFrameHandler
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
_strnicmp
_snprintf
_beginthreadex

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ujyhkuy
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4ab50040bfa175d670c83c569e6ffa5

Headers

File Characteristics

Imports

msvfw32

kernel32

msvcrt

msvcp60

Sections

.text Size: 73KB - Virtual size: 73KB

.ujyhkuy Size: 8KB - Virtual size: 7KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 11KB - Virtual size: 16KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 73KB - Virtual size: 73KB

.ujyhkuy
Size: 8KB - Virtual size: 7KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 11KB - Virtual size: 16KB

.rsrc
Size: 7KB - Virtual size: 6KB