277da496b8223b717f5af52e0a887131_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

277da496b8223b717f5af52e0a887131_JaffaCakes118
Size

56KB
MD5

277da496b8223b717f5af52e0a887131
SHA1

28efe3f787636221bcc62e65557bb8cf7209b97b
SHA256

4e5c54934b607ffc7ae3be36f5f985871b00fc3a2673f9ae62ade5ca948690da
SHA512

d167e110c7c91773365bce7ede520f144d2f38789d372fb387011d43bf7a4088f2a5970c5b6891e28158cd5f4f30ce5de4bc6867baaa7a5cbd77a2f8025e9859
SSDEEP

1536:FrhOeyybHNypJPWkoRbKYkrXXdBmXv9dSicxj3hOnGYmT:FrhOZybHNy58bKjrdkv98thEy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
277da496b8223b717f5af52e0a887131_JaffaCakes118

Files

277da496b8223b717f5af52e0a887131_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01abb8ece164fe4f06bcf852c31659e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
CreateThread
Sleep
MulDiv

user32

SendMessageA
GetWindowTextA
CreateWindowExA
SetFocus
MessageBoxA
PostQuitMessage
DestroyWindow
DefWindowProcA
UnregisterClassA
GetMessageA
GetDC
DispatchMessageA
TranslateMessage
LoadCursorA
RegisterClassExA
ShowWindow

gdi32

GetDeviceCaps

ole32

CoInitialize

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

msvcrt

sprintf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_EH_prolog
__CxxFrameHandler
strcat
strlen
_except_handler3
memcpy
memset
??2@YAPAXI@Z
_stricmp
malloc
getenv
memmove
strcmp

Sections

.chteam
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.chteam1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.chteam2
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.chteam3
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01abb8ece164fe4f06bcf852c31659e7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

msvcp60

msvcrt

Sections

.chteam Size: 13KB - Virtual size: 13KB

.chteam1 Size: 2KB - Virtual size: 2KB

.chteam2 Size: 2KB - Virtual size: 2KB

.chteam3 Size: 37KB - Virtual size: 37KB

.chteam
Size: 13KB - Virtual size: 13KB

.chteam1
Size: 2KB - Virtual size: 2KB

.chteam2
Size: 2KB - Virtual size: 2KB

.chteam3
Size: 37KB - Virtual size: 37KB