3eb226ed5c05fc36f2e55a31616a26c7_JaffaCakes118

General

Target

3eb226ed5c05fc36f2e55a31616a26c7_JaffaCakes118
Size

80KB
MD5

3eb226ed5c05fc36f2e55a31616a26c7
SHA1

1364058a4747c914bd6cdbcfb4a42dc3fa8b0c1e
SHA256

03d6e20e98897a7244bbd81af42656c450193a75c64b61701d3d1a6e874fdeec
SHA512

3b28bf6a0d1dc1857829896c264147a21ea4c921fbd2cc812b4a43e038b6f78fd035b78684d5a59bd991849ea183aeb90bf8f248913c33df23cde5741715d039
SSDEEP

1536:4Dfrz9fLNzcIq8lpr5jlsJM+60aECWpHuCQk8TZbCrJOWhA/R8/W:8ZNcJ+pr5j6JHGaQk8lb+JOW8RC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb226ed5c05fc36f2e55a31616a26c7_JaffaCakes118

Files

3eb226ed5c05fc36f2e55a31616a26c7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

16c60eb75fea734ef0b7feaa5b92f950

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLastError
OutputDebugStringA
GetTickCount
VirtualProtect
VirtualQuery
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
IsDebuggerPresent

user32

MessageBoxA

msvcr90

_except_handler4_common
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
malloc
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
free
wcsrchr
??3@YAXPAX@Z
strstr
memcpy
??2@YAPAXI@Z
strtok
exit
memset
_initterm
_stricmp

ws2_32

gethostbyname

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16c60eb75fea734ef0b7feaa5b92f950

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcr90

ws2_32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 85KB - Virtual size: 85KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 85KB - Virtual size: 85KB