38b180e2c0a1dbe28a11e5bcc398d2f9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

38b180e2c0a1dbe28a11e5bcc398d2f9_JaffaCakes118
Size

7.0MB
MD5

38b180e2c0a1dbe28a11e5bcc398d2f9
SHA1

75b244334d030d594229856ab441c9389d4d9633
SHA256

cb246429f25bbc8537d790308ead4267969c936fac65a384fbbea0ba2bece8e6
SHA512

e957e47403139ca2100b0711ebe715a2139bb37e8ffe96baf73923c2c05beaf12b72f2e6892911a9e96fb75416730e29e0b2fb8ae669ca91b7ec5d433c4d0a39
SSDEEP

98304:4gGy3MRmZeyy26cUpV0s/qjcleZfxvd2R5MDEL1BNV1NR:D13MoZeyyX0dZ1u5dL1d1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b180e2c0a1dbe28a11e5bcc398d2f9_JaffaCakes118

Files

38b180e2c0a1dbe28a11e5bcc398d2f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

88381b84da56810b869e897e6d45bd58

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\한국(korea)\20111025_sak\RagnarokClient\Release Sakray\RagexeRE.pdb

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

EnumChildWindows

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 523KB - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 756KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.diff
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.harm0
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.harm1
Size: 5KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.harm2
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.main
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

88381b84da56810b869e897e6d45bd58

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 523KB - Virtual size: 522KB

.data Size: 70KB - Virtual size: 756KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 219KB - Virtual size: 219KB

.diff Size: 1024B - Virtual size: 4KB

.harm0 Size: 118KB - Virtual size: 118KB

.harm1 Size: 5KB - Virtual size: 214KB

.harm2 Size: 70KB - Virtual size: 69KB

.main Size: 2.4MB - Virtual size: 2.4MB

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 523KB - Virtual size: 522KB

.data
Size: 70KB - Virtual size: 756KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 219KB - Virtual size: 219KB

.diff
Size: 1024B - Virtual size: 4KB

.harm0
Size: 118KB - Virtual size: 118KB

.harm1
Size: 5KB - Virtual size: 214KB

.harm2
Size: 70KB - Virtual size: 69KB

.main
Size: 2.4MB - Virtual size: 2.4MB