37105829002a9fa79723b1a866e3123e_JaffaCakes118

General

Target

37105829002a9fa79723b1a866e3123e_JaffaCakes118
Size

130KB
MD5

37105829002a9fa79723b1a866e3123e
SHA1

5fd29613d089b04134de8176697ca7713db5e601
SHA256

d8d702be7cfc033661afecd2eb3600ab135b0c6b26dd77748a83bf5cda7f6f48
SHA512

35572f753d1afaac9e8bb6c8b48b69e6ff5470f5751a895c91bf61fe256560f37ee8f1f8369b4e273e23fec4031cb6232535479709cf23e63d59a455d90725b9
SSDEEP

1536:puR1ue51xDQgUK/DXb9lPDejdBlKHUEh1QNyeEAU0txwWZ184qyD7Ki:pCceNQUrnekYNyeEc7jDKi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37105829002a9fa79723b1a866e3123e_JaffaCakes118

Files

37105829002a9fa79723b1a866e3123e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5a00e3ceeb86c264f84cdc481a5ebecc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_getdiskfree
__getmainargs
_wenviron
fgetws
wscanf
_setjmp
isprint
tmpfile
_controlfp
_wexecvpe
setlocale
__p__fmode
_ui64toa
_adj_fdiv_r
isupper
_XcptFilter
_wfdopen
memcpy
_except_handler3
_sys_errlist
_adjust_fdiv
_mbscmp
_mbscoll
__set_app_type
_memicmp
_acmdln
_initterm
_mbcjmstojis
_heapused
exit
__setusermatherr
_wexecl
_execvpe
atexit
freopen
mktime
_getdrive
_gcvt
_memccpy
_inp
_wtoi64
__p__commode
_exit
_wcsdup
_getsystime

kernel32

GetVersion
QueryPerformanceFrequency
HeapCreate
QueryPerformanceCounter
WriteConsoleA
IsBadReadPtr
LoadLibraryW
TlsGetValue
SetLastError
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetStringTypeW
GlobalAlloc
GetModuleHandleA
GetCommandLineW
GetConsoleCP
GetSystemDirectoryA
GlobalUnlock
IsValidCodePage
WideCharToMultiByte
LoadResource
GetCommandLineA
SetPriorityClass
GetSystemTimeAsFileTime
ReadProcessMemory
ResetEvent
lstrcmpiA
GetCurrentProcessId

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a00e3ceeb86c264f84cdc481a5ebecc

Headers

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 119KB - Virtual size: 118KB

.data Size: 512B - Virtual size: 32KB

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 119KB - Virtual size: 118KB

.data
Size: 512B - Virtual size: 32KB

.rsrc
Size: 512B - Virtual size: 4B