39ec51909a3742feb8675d8d9d5676c2_JaffaCakes118

General

Target

39ec51909a3742feb8675d8d9d5676c2_JaffaCakes118
Size

16KB
MD5

39ec51909a3742feb8675d8d9d5676c2
SHA1

9afc696db4c50faca712e8cd2f611f885b78b71e
SHA256

57a159b7a40e594e0b2c06932fddbce93df9f52b9aea26000069ef9ac0fb6714
SHA512

205dff2df3c158f9d1c8dc1d00eaac99079a7ff49732d618290c4934ae467e43f7709c5706a6493235da4d8a55dbe2334ce2fcab30522ac1e8bf6f691f76ad09
SSDEEP

384:S7dYgIEC31Z+wB0xc76ectPslY17O/U6:FgIEC3XZ6ectPz7O86

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ec51909a3742feb8675d8d9d5676c2_JaffaCakes118

Files

39ec51909a3742feb8675d8d9d5676c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f91a706d4efa7e0b87370d0aceedf74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr70

strcmp
fprintf
_iob
fwrite
qsort
memcpy
fclose
fread
fopen
free
calloc
strlen
strchr
strncmp
fputs
_c_exit
perror
_XcptFilter
_cexit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
_exit
exit
_stat

kernel32

GetModuleHandleA

Exports

Exports

XPT_ArenaFree
XPT_ArenaMalloc
XPT_ArenaStrDup
XPT_DataOffset
XPT_DestroyArena
XPT_DestroyInterfaceDirectoryEntry
XPT_DestroyXDRState
XPT_Do16
XPT_Do32
XPT_Do64
XPT_Do8
XPT_DoCString
XPT_DoHeader
XPT_DoHeaderPrologue
XPT_DoIID
XPT_DoString
XPT_DoStringInline
XPT_DumpStats
XPT_FillInterfaceDirectoryEntry
XPT_FillMethodDescriptor
XPT_FillParamDescriptor
XPT_FreeHeader
XPT_FreeInterfaceDescriptor
XPT_GetAddrForOffset
XPT_GetInterfaceIndexByName
XPT_GetOffsetForAddr
XPT_GetXDRData
XPT_GetXDRDataLength
XPT_InterfaceDescriptorAddConsts
XPT_InterfaceDescriptorAddMethods
XPT_InterfaceDescriptorAddTypes
XPT_MakeCursor
XPT_NewAnnotation
XPT_NewArena
XPT_NewHeader
XPT_NewInterfaceDescriptor
XPT_NewString
XPT_NewStringZ
XPT_NewXDRState
XPT_NotifyDoneLoading
XPT_ParseVersionString
XPT_SeekTo
XPT_SetAddrForOffset
XPT_SetDataOffset
XPT_SetOffsetForAddr
XPT_SizeOfHeader
XPT_SizeOfHeaderBlock

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0f91a706d4efa7e0b87370d0aceedf74

Headers

File Characteristics

Imports

msvcr70

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 88B

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 88B