44b4c118d84d671cedc13355b8fceb13_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44b4c118d84d671cedc13355b8fceb13_JaffaCakes118
Size

493KB
MD5

44b4c118d84d671cedc13355b8fceb13
SHA1

f6c00b3a8bca777ef7f63c39cad9f58aa3db8f2c
SHA256

1b9ba5f3cda5bc8d12a9276738d898e7c2ff8ca27a6f1b3d1a48cf2fbce3ebfa
SHA512

d3c445960642cc7a8e16bf7b24bcf26ee2221f935314e5331ffeca95a725c91812c8fde848f76d394f116c9f96efd73ab1940da7567b49b2c91e395c041d43e5
SSDEEP

12288:tifKld6ArkxqydRf+yf5oPFiSEQ8ti5zhRP:tifKlv037ZEELti5zh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b4c118d84d671cedc13355b8fceb13_JaffaCakes118

Files

44b4c118d84d671cedc13355b8fceb13_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f25eb5a858877c98c5ad7125f747883

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\Administrator\Desktop\cwebpage_src\simple\Debug\Simple.pdb

Imports

kernel32

GlobalFree
GlobalAlloc
MultiByteToWideChar
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InterlockedExchange
RtlUnwind
IsValidCodePage
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
IsDebuggerPresent
RaiseException
DebugBreak
WideCharToMultiByte
lstrlenA
GetProcAddress
LoadLibraryA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapValidate
IsBadReadPtr
GetStdHandle
InterlockedDecrement
WriteFile
OutputDebugStringA
InterlockedIncrement
GetLastError
WriteConsoleW
GetFileType
OutputDebugStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
SetConsoleCtrlHandler
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
GetProcessHeap
VirtualQuery
FreeLibrary
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
SetEnvironmentVariableA

user32

GetMessageA
GetWindowLongA
GetClientRect
SetWindowLongA
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
RegisterClassExA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage

ole32

OleSetContainedObject
CoGetClassObject
OleUninitialize
OleInitialize

oleaut32

VariantInit
SysAllocString
VariantClear
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy

Sections

.textbss
Size: - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ktext
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5f25eb5a858877c98c5ad7125f747883

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

oleaut32

Sections

.textbss Size: - Virtual size: 169KB

.text Size: 356KB - Virtual size: 355KB

.rdata Size: 80KB - Virtual size: 80KB

.data Size: 5KB - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 26KB - Virtual size: 25KB

.ktext Size: 20KB - Virtual size: 20KB

.textbss
Size: - Virtual size: 169KB

.text
Size: 356KB - Virtual size: 355KB

.rdata
Size: 80KB - Virtual size: 80KB

.data
Size: 5KB - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 26KB - Virtual size: 25KB

.ktext
Size: 20KB - Virtual size: 20KB