4262907e32baab81430116092bf1a2d4_JaffaCakes118

General

Target

4262907e32baab81430116092bf1a2d4_JaffaCakes118
Size

41KB
MD5

4262907e32baab81430116092bf1a2d4
SHA1

c4efed9b3d5b53c5039d7853129ff0d400389dd1
SHA256

f0af51e1d1c6dbfac8de06b51eeec364ba51147925ef36093c7773e7a78856b3
SHA512

675ba05a5471d2e824dc9bc1e982279e90db0b95ecedf3133bef2c37b6e2375c380bee685371c2915e556f705c7318133a490301c9a94982ba96d61a66803087
SSDEEP

768:zWKb8qDPj7LXxA4uzqQMpm+Ec0TMLVc4uU+X4:3b8SPj7Lhcqx2TMLyjzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4262907e32baab81430116092bf1a2d4_JaffaCakes118

Files

4262907e32baab81430116092bf1a2d4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

657e3ddbdc679873e487a1f712053bc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
GetConsoleMode
GetCommandLineA
GetStdHandle
Sleep
GetVolumeNameForVolumeMountPointW
lstrcpynW
InterlockedExchange
HeapFree
FindFirstFileA
LoadLibraryExW
GetDateFormatW
VirtualProtect
lstrlenA
GetFileSize
GlobalSize
GetFullPathNameW
SetConsoleCtrlHandler
GlobalAlloc
CreateThread

msvcrt

_controlfp
_errno
atoi
__winitenv
free
_adjust_fdiv
_pctype
strchr
__initenv
realloc
_stricmp
fopen
strncmp
time
wcscpy
__mb_cur_max
malloc
toupper
__p__fmode

ulib

?Initialize@ARRAY@@QAEEKK@Z
??0FSN_FILTER@@QAE@XZ
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
??0PROGRAM@@IAE@XZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Fatal@PROGRAM@@UBEXXZ
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?Initialize@PATH@@QAEEPBVWSTRING@@E@Z
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
??1DSTRING@@UAE@XZ
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@WSTRING@@QAEEPBDK@Z
??0PATH@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0CLASS_DESCRIPTOR@@QAE@XZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@PATH@@QAEEPBV1@E@Z
?QueryString@WSTRING@@QBEPAV1@KK@Z
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
??1STREAM_MESSAGE@@UAE@XZ

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

657e3ddbdc679873e487a1f712053bc8

Headers

File Characteristics

Imports

kernel32

msvcrt

ulib

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB