25d249691f6bead419752e6584b906ad_JaffaCakes118

General

Target

25d249691f6bead419752e6584b906ad_JaffaCakes118
Size

41KB
MD5

25d249691f6bead419752e6584b906ad
SHA1

b8231c8f62225dad658179a661de8d9e2695c8f4
SHA256

7b8a0b6de65a8987bc594889168b211a370bf329182c4a7b29e9f77c30dce7c5
SHA512

51a2fe8d82ef7090eec9e2a097a033fa0f1217206b5e0ac534d2a72ab09a0335c4009b9d5629fbb35bed55f4d98b946b90e7b9cc9516f3b1775c68a4b051c508
SSDEEP

768:zWKb8qDPj7LXxA4uzqQMpm+Ec0TMLVc4uU+X4:3b8SPj7Lhcqx2TMLyjzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d249691f6bead419752e6584b906ad_JaffaCakes118

Files

25d249691f6bead419752e6584b906ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

657e3ddbdc679873e487a1f712053bc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
GetConsoleMode
GetCommandLineA
GetStdHandle
Sleep
GetVolumeNameForVolumeMountPointW
lstrcpynW
InterlockedExchange
HeapFree
FindFirstFileA
LoadLibraryExW
GetDateFormatW
VirtualProtect
lstrlenA
GetFileSize
GlobalSize
GetFullPathNameW
SetConsoleCtrlHandler
GlobalAlloc
CreateThread

msvcrt

_controlfp
_errno
atoi
__winitenv
free
_adjust_fdiv
_pctype
strchr
__initenv
realloc
_stricmp
fopen
strncmp
time
wcscpy
__mb_cur_max
malloc
toupper
__p__fmode

ulib

?Initialize@ARRAY@@QAEEKK@Z
??0FSN_FILTER@@QAE@XZ
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
??0PROGRAM@@IAE@XZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Fatal@PROGRAM@@UBEXXZ
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?Initialize@PATH@@QAEEPBVWSTRING@@E@Z
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
??1DSTRING@@UAE@XZ
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@WSTRING@@QAEEPBDK@Z
??0PATH@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0CLASS_DESCRIPTOR@@QAE@XZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@PATH@@QAEEPBV1@E@Z
?QueryString@WSTRING@@QBEPAV1@KK@Z
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
??1STREAM_MESSAGE@@UAE@XZ

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

657e3ddbdc679873e487a1f712053bc8

Headers

File Characteristics

Imports

kernel32

msvcrt

ulib

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB