30df006ce419b532b76b73985d7b7135_JaffaCakes118

General

Target

30df006ce419b532b76b73985d7b7135_JaffaCakes118
Size

123KB
MD5

30df006ce419b532b76b73985d7b7135
SHA1

3350759c8771f49e365fdcf4b6567a37f93ce87e
SHA256

2eaea9198f90219e7154fefa4e2f1c1b0d66c8a1c8e78a8fc6b809a85171a63a
SHA512

2c35f62512143f06df8fb390a04e7c2d5268cd74bf335d468e1620010f741af0b0c26e2c0ff622282ced4d67d00ad69ffee2cbd5889c00a18ac0cacff6cbacc9
SSDEEP

3072:lnkxYhFH0Tm7wbs9Qhrk4/ENN8dZDlaISycpy2eBHPSTTn:lnkxYXixhrxEjtSjBvUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30df006ce419b532b76b73985d7b7135_JaffaCakes118

Files

30df006ce419b532b76b73985d7b7135_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6780ca7296aa9c0575872da57c33146c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_ftol
strncpy
__CxxFrameHandler
strcmp
srand
??2@YAPAXI@Z
memcpy
rand
??3@YAXPAX@Z
strlen
memset
_strrev
_strlwr
_stricmp
strchr
_except_handler3

kernel32

GetTempPathA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetLogicalDrives
SetFileAttributesA
DeleteFileA
lstrlenA
CreateDirectoryA
GetCurrentProcess
GetCommandLineA
SetUnhandledExceptionFilter
OpenEventA
ExpandEnvironmentStringsA
GetShortPathNameA
GetFileAttributesA
CreateEventA
WaitForSingleObject
GetModuleFileNameA
lstrcpyA
LoadLibraryA
SleepEx
GetSystemDirectoryA
CreateFileA
GetTickCount
WriteFile
GetFileTime
lstrcatA
Sleep
GetProcAddress
GetModuleHandleA
GetLastError
ExitProcess
GetCurrentDirectoryA
MoveFileA
CloseHandle
SetFileTime

ws2_32

closesocket

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6780ca7296aa9c0575872da57c33146c

Headers

File Characteristics

Imports

msvcrt

kernel32

ws2_32

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 164KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 164KB

.rsrc
Size: 4KB - Virtual size: 1KB