3557021ba70d739e814e2f422224ec33_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3557021ba70d739e814e2f422224ec33_JaffaCakes118
Size

83KB
MD5

3557021ba70d739e814e2f422224ec33
SHA1

20c1ae553eac4aa33a054aa54e4b42641daefccf
SHA256

07708bc64b7986940a0edd23ec012fa6829d2b7f6f290a241bda80bffe1a326b
SHA512

684c6273a21f5524cb5947eea39ed3596999c8d67c7029363b8710abff254d656231d8750e6352004b66779f000e3741d02c1c769fc91843b32fc84621a86d53
SSDEEP

1536:dS+8XEJe0gYUPbz8stlXue1HJd7n7gHUKW4LlaxkgDkpvg6Gqa+c:dj8XEJe0VUPsu1HLMHTWrshc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3557021ba70d739e814e2f422224ec33_JaffaCakes118

Files

3557021ba70d739e814e2f422224ec33_JaffaCakes118
.exe windows:5 windows x86 arch:x86

376f88d6598356cf37f6e32b1658a391

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfcsubs

?TrimLeft@CString@@QAEXXZ
??_FCMapStringToPtr@@QAEXXZ
?Right@CString@@QBE?AV1@H@Z
?CompareNoCase@CString@@QBEHPBG@Z
??_7CSyncObject@@6B@
?Find@CString@@QBEHPBG@Z
??YCString@@QAEABV0@G@Z
?ReleaseBuffer@CString@@QAEXH@Z
??P@YG_NABVCString@@0@Z
??ACStringArray@@QBE?AVCString@@H@Z
?Empty@CString@@QAEXXZ
??0CString@@QAE@XZ
?LockBuffer@CString@@QAEPAGXZ
??0CString@@QAE@PBD@Z
?SetAt@CMapStringToPtr@@QAEXPBGPAX@Z
?AfxLoadString@@YGHIPAGI@Z
??0CString@@QAE@PBGH@Z

msvcrt20

_getch
_adj_fdiv_m32
_mbsncat
iswalnum
strcat
??1filebuf@@UAE@XZ
_wspawnvp
_getdiskfree
__mb_cur_max
strncmp
_cabs
_heapwalk
??0istrstream@@QAE@ABV0@@Z
_mbbtombc
??0filebuf@@QAE@HPADH@Z

msvcp60

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PADH@Z
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Getcat@?$moneypunct@G$0A@@std@@SAIXZ
??_7?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?do_close@?$messages@D@std@@MBEXH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?epsilon@?$numeric_limits@D@std@@SADXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?min@?$numeric_limits@H@std@@SAHXZ
?epsilon@?$numeric_limits@O@std@@SAOXZ

kernel32

SetConsoleCtrlHandler
WaitNamedPipeW
GlobalAlloc
ActivateActCtx
FindFirstVolumeMountPointA
InitializeCriticalSectionAndSpinCount
GetDiskFreeSpaceA
ScrollConsoleScreenBufferW
FindFirstVolumeMountPointW
FindNextFileA
VirtualAlloc
GetSystemDefaultLCID
LoadLibraryA
Thread32Next
OutputDebugStringW
SetConsoleMaximumWindowSize

wldap32

ldap_delete_sA
ldap_count_entries
ldap_modify_sA
ldap_get_paged_count
ldap_extended_operation_sW
ldap_addW
ldap_conn_from_msg
ldap_value_free_len
ldap_bind_sA
ber_bvfree
ldap_search_extA
ldap_start_tls_sW
ber_scanf

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

376f88d6598356cf37f6e32b1658a391

Headers

DLL Characteristics

File Characteristics

Imports

mfcsubs

msvcrt20

msvcp60

kernel32

wldap32

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 25KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 512B - Virtual size: 252B

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 25KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 512B - Virtual size: 252B