431952b4d96452d8bb4e5edea1ffb385_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

431952b4d96452d8bb4e5edea1ffb385_JaffaCakes118
Size

78KB
MD5

431952b4d96452d8bb4e5edea1ffb385
SHA1

a116b029f7f0e3a3391f44a50cb4648073e05050
SHA256

c7cb2d5ef6c90ab635379506fa8430ace043571a0ed8ee2defa2ce2f48c815d9
SHA512

f7c05ba4ac6b9556d09e8eaa6efd7efd52d983afb193c953f13be1ba1c2ca065dae4d7677e6cfc0ea25e21a6a53d530afb5d71d9d82157c0cd2cf1d914f4a7a4
SSDEEP

1536:YHkUhusmMc8F2VkqmABbwsr5QTJugBteLa:Ohu2cGqmAxw/8gBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
431952b4d96452d8bb4e5edea1ffb385_JaffaCakes118

Files

431952b4d96452d8bb4e5edea1ffb385_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6fc0de45fe18bdec03b276d1cc50f79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetFileSize
GetModuleHandleA
GetStartupInfoA
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
cos
fflush
fprintf
free
malloc
signal
strcmp

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage

comctl32

InitCommonControls

ole32

CoCreateGuid
BindMoniker

ws2_32

getpeername

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f6fc0de45fe18bdec03b276d1cc50f79

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

comctl32

ole32

ws2_32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 59KB - Virtual size: 58KB

.bss Size: - Virtual size: 480B

.idata Size: 2KB - Virtual size: 1KB

DATA Size: 512B - Virtual size: 4KB

CODE Size: 512B - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 59KB - Virtual size: 58KB

.bss
Size: - Virtual size: 480B

.idata
Size: 2KB - Virtual size: 1KB

DATA
Size: 512B - Virtual size: 4KB

CODE
Size: 512B - Virtual size: 4KB