3bdca551a4d4ac19c095115143731cfe_JaffaCakes118

General

Target

3bdca551a4d4ac19c095115143731cfe_JaffaCakes118
Size

181KB
MD5

3bdca551a4d4ac19c095115143731cfe
SHA1

435a94ecbf7606388d62ab94c623777fa5693e4f
SHA256

5eee36cacc44ad7afe3d2f730b40cb68418def120fa3ae1cb5dd2120985dfe57
SHA512

01ad0747fa8235f30a6e26a6f8a0113aa7654bdc7f0bad019e54f42ba23075d4c5d0eb679f0a6488716860bcaa8f8c5a57d2e77bcf9255939b6d54ed15bf1bcd
SSDEEP

3072:rZTy+k51LeiH+91RbK0HXv/Gbo92dDDVqAFK5Vuv9HWZ6+tQ41XFqiGA4:I51LeiH+919T3Gbbhfs5cvht+tJBkrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bdca551a4d4ac19c095115143731cfe_JaffaCakes118

Files

3bdca551a4d4ac19c095115143731cfe_JaffaCakes118
.exe windows:6 windows x86 arch:x86

700e3f20325b54501baa05c575aa14a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msfeedssync.pdb

Imports

kernel32

LocalFree
GetVersion
GetProcAddress
GetModuleHandleW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoW
LocalAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind

msvcrt

__p__fmode
__set_app_type
memcpy
?terminate@@YAXXZ
_controlfp
__p__commode
wcstoul
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs

ole32

CoCreateInstance
CoUninitialize
CLSIDFromString
CoInitializeEx

shlwapi

ord437

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

700e3f20325b54501baa05c575aa14a1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

ole32

shlwapi

version

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 169KB - Virtual size: 169KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 169KB - Virtual size: 169KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB