4546ac064f96462ea09ee554b4b5e931_JaffaCakes118

General

Target

4546ac064f96462ea09ee554b4b5e931_JaffaCakes118
Size

156KB
MD5

4546ac064f96462ea09ee554b4b5e931
SHA1

ba632ddfba07f9b0d33186e0acc632c8d9f62abf
SHA256

fa0ef3299ba231ee57e2ddd7c5bb3c46a0e5e04db9331a672e10a5864b6e4832
SHA512

3daa13950c721d97696335619766477423921f7d046f30ddcd17dfb982f32fa451d6ef31fc222f36a8c16f60d699063bffc25c01b81a2cf9f50a229b139b0bba
SSDEEP

3072:ICIsp+kfZaTBfgUkbVAF6MeQ4D+OOp0DEogIpLhFhln5IKS:pp3fZaTBJkbV26MXBZ+ptFX5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4546ac064f96462ea09ee554b4b5e931_JaffaCakes118

Files

4546ac064f96462ea09ee554b4b5e931_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d27a20073e25bcf6615bbe01e08dca7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess
LoadLibraryA
GetProcAddress
GetCurrentDirectoryA
GetTempPathA
MoveFileA
CloseHandle
WriteFile
GetTickCount
GetCurrentProcessId
CreateFileA
lstrlenA
SleepEx
GetModuleFileNameA
GetLastError
CreateEventA
WaitForSingleObject
GetCurrentProcess
Sleep
GetShortPathNameA
ExpandEnvironmentStringsA
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateProcessA
GetStartupInfoA
CopyFileA
GetCommandLineA
GetCurrentThreadId
CreateDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
IsBadWritePtr
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary

msvcrt

memset
strlen
strstr
memmove
??2@YAPAXI@Z
srand
memcpy
__CxxFrameHandler
strrchr
strncpy
rand
_ftol
tolower
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strlwr
_strrev
strchr
_except_handler3
malloc
free
_itoa

ws2_32

closesocket
getprotobynumber

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d27a20073e25bcf6615bbe01e08dca7

Headers

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 28KB - Virtual size: 28KB