38b8897e4ce49de040f328f927775000_JaffaCakes118

General

Target

38b8897e4ce49de040f328f927775000_JaffaCakes118
Size

166KB
MD5

38b8897e4ce49de040f328f927775000
SHA1

f959fce71dc07bb2ad08c6762428de7cae26db57
SHA256

2c919bc8753f086e540fd5652600a6b10d40930cb42b0a80ee74a401c2d8b0be
SHA512

b6d563d3387fb0e559295341b53d1102d0b8fb26c81249ace8b9200762493de15e3c4d3ebd7f6c1d86f6bf6a4da5d4fd65c593f1269193466ee1bbd1335e7eb5
SSDEEP

3072:2gIUfZO+E775+07y/wwZA/sT6mGaf0/S3VegTKe3ZI2esf4aR1+aJe1mgawzxsBT:BO+EZ+dXW/S352e3aOf4aRUTV5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b8897e4ce49de040f328f927775000_JaffaCakes118

Files

38b8897e4ce49de040f328f927775000_JaffaCakes118
.exe windows:5 windows x86 arch:x86

90b17285604296f812a6d14cc0502afa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr100

_invoke_watson
memcpy
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
??2@YAPAXI@Z
free
realloc
??3@YAXPAX@Z
memset
_controlfp_s
_stricmp

kernel32

Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
FindResourceA
LoadResource
SizeofResource
LockResource
HeapAlloc
FreeLibrary
GetProcessHeap
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc

user32

wsprintfA

Exports

Exports

Ip

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90b17285604296f812a6d14cc0502afa

Headers

DLL Characteristics

File Characteristics

Imports

msvcr100

kernel32

user32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 4KB

.rsrc Size: 152KB - Virtual size: 152KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 152KB - Virtual size: 152KB

.reloc
Size: 1KB - Virtual size: 1KB