2ef53cbbaa51321f9a5c7852cde3e4c4_JaffaCakes118

General

Target

2ef53cbbaa51321f9a5c7852cde3e4c4_JaffaCakes118
Size

41KB
MD5

2ef53cbbaa51321f9a5c7852cde3e4c4
SHA1

db2e9d47ade29ea83edb2d18eca7fc2662aa2980
SHA256

af6a034cfcf582a6dbcce8ea1b481c30130ab078d79a9c984dd800a74aa6045f
SHA512

87e7b189d446cdb457cd0da5a16212d5478362fe3a731e094045a2c10ab298bb44ccb4507938cbc7b54be9877754ee37328204ef1efdbe0fe1e8a17970010638
SSDEEP

768:zWKb8qDPj7LXxA4uzqQMpm+Ec0TMLVc4uU+X4:3b8SPj7Lhcqx2TMLyjzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef53cbbaa51321f9a5c7852cde3e4c4_JaffaCakes118

Files

2ef53cbbaa51321f9a5c7852cde3e4c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

657e3ddbdc679873e487a1f712053bc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
GetConsoleMode
GetCommandLineA
GetStdHandle
Sleep
GetVolumeNameForVolumeMountPointW
lstrcpynW
InterlockedExchange
HeapFree
FindFirstFileA
LoadLibraryExW
GetDateFormatW
VirtualProtect
lstrlenA
GetFileSize
GlobalSize
GetFullPathNameW
SetConsoleCtrlHandler
GlobalAlloc
CreateThread

msvcrt

_controlfp
_errno
atoi
__winitenv
free
_adjust_fdiv
_pctype
strchr
__initenv
realloc
_stricmp
fopen
strncmp
time
wcscpy
__mb_cur_max
malloc
toupper
__p__fmode

ulib

?Initialize@ARRAY@@QAEEKK@Z
??0FSN_FILTER@@QAE@XZ
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
??0PROGRAM@@IAE@XZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Fatal@PROGRAM@@UBEXXZ
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?Initialize@PATH@@QAEEPBVWSTRING@@E@Z
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
??1DSTRING@@UAE@XZ
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@WSTRING@@QAEEPBDK@Z
??0PATH@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0CLASS_DESCRIPTOR@@QAE@XZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@PATH@@QAEEPBV1@E@Z
?QueryString@WSTRING@@QBEPAV1@KK@Z
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
??1STREAM_MESSAGE@@UAE@XZ

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

657e3ddbdc679873e487a1f712053bc8

Headers

File Characteristics

Imports

kernel32

msvcrt

ulib

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB