4a9e091cc8d7a1523681ccefa854f913_JaffaCakes118

General

Target

4a9e091cc8d7a1523681ccefa854f913_JaffaCakes118
Size

9KB
MD5

4a9e091cc8d7a1523681ccefa854f913
SHA1

307737af855479c3698d29648fb0f3f2cafa3cfd
SHA256

822b09cb12618a73d0e7b0bcf98bbe6b36c291dcdaf5a0f6658720fddeb3bb6a
SHA512

0e14de1d9c496a77eb2bb183b6006cbea324d725c950afd3e55220bcc34a0bc660b4d7148c295dc29e5afc70cafcf5cf7e1b2a9a3d03255e8364710c5e5fe165
SSDEEP

192:aKoeBwv+doS2deN3jEvKZtQxg2oMR6CkqDFFf6:areBqgoDMJQvcW6iS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a9e091cc8d7a1523681ccefa854f913_JaffaCakes118

Files

4a9e091cc8d7a1523681ccefa854f913_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dc7de082d34f598d04c751dd0caf4c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\plugin1.0\releaee\exetwo.pdb

Imports

rpcrt4

UuidCreateSequential

kernel32

GetTickCount
IsDebuggerPresent
MoveFileExA
MultiByteToWideChar
CopyFileA
WinExec
GetPrivateProfileStringA
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter

ole32

CoCreateInstance
CoUninitialize
CoInitialize

msvcp80

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr80

_amsg_exit
_cexit
_exit
memset
exit
__initenv
_initterm
_initterm_e
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
sprintf
rename
??3@YAXPAX@Z
_configthreadlocale
__CxxFrameHandler3
__getmainargs
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dc7de082d34f598d04c751dd0caf4c9

Headers

File Characteristics

PDB Paths

Imports

rpcrt4

kernel32

ole32

msvcp80

msvcr80

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 512B - Virtual size: 428B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 512B - Virtual size: 428B