45abb353f06cdb3278de5bb536efacf5_JaffaCakes118

General

Target

45abb353f06cdb3278de5bb536efacf5_JaffaCakes118
Size

208KB
MD5

45abb353f06cdb3278de5bb536efacf5
SHA1

85046c6201e9dde8fca239429a6aa513b4373722
SHA256

f9647795f2cb14eb168b917ee47d557677e2472cb2a15fc5628493e232b532ea
SHA512

ceb30600d555c782a3c284b729a6e200e29c53a815fbb1b31cbefedef6214d6a665fb711f60d3d706a2be35d4abe2f145c070a76d4dc6a9153878b0ef74bec25
SSDEEP

3072:Z/w7a0ZM+THc9cdwSsVZtVnOcOZ3+SESsvdhcFFQFG/nos5/VeaamjJVDOQF:Z/w7CqdQVxzINFGdiFWcnnVeaa0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45abb353f06cdb3278de5bb536efacf5_JaffaCakes118

Files

45abb353f06cdb3278de5bb536efacf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b4fc0252fe6e3e96c3f54a8359e4b58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_AREA\jdk6\control\build\windows-i586\tmp\sun\com.sun.java.util.jar.pack\unpack\unpack200.pdb

Imports

msvcr71

free
realloc
memchr
memcmp
strlen
strcat
strncat
strchr
fflush
fclose
_iob
fprintf
qsort
exit
sprintf
strcmp
time
atoi
fopen
strrchr
strcpy
abort
malloc
_errno
calloc
gmtime
fread
strtok
getenv
strncmp
remove
_c_exit
_exit
_XcptFilter
_cexit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
memset
fwrite
memcpy
_tempnam
_mkdir
_strdup
_fileno

kernel32

GetTempPathA
GetModuleHandleA

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Qy�QG�
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3b4fc0252fe6e3e96c3f54a8359e4b58

Headers

File Characteristics

PDB Paths

Imports

msvcr71

kernel32

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 12KB - Virtual size: 11KB

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

Qy�QG� Size: 88KB - Virtual size: 88KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 11KB

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

Qy�QG�
Size: 88KB - Virtual size: 88KB