4d3d910ad04bf8748b23e010c7b8a96f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4d3d910ad04bf8748b23e010c7b8a96f_JaffaCakes118
Size

259KB
MD5

4d3d910ad04bf8748b23e010c7b8a96f
SHA1

29035c538221036b4ddede9bbfa167ea5b30514b
SHA256

c970d025af3770dc012ec2534e27d9114ab868cd2218a16f1da5499103ace155
SHA512

926e3efa62d463d838226a41bf6ca5d50859c1038aedd57c6ce94068282b10db2b1d13cc8e68a36c401a4640205cc2d3eba72d1e00939a6c33d4559ab7c2ed2f
SSDEEP

3072:XACfDbLmz6VkqMXiBe6pzwWNy0lC+pdAUTXGh/O3wipCZZ0wCAimYdR1ez2zCQ5n:XACfDb/V+O7weYKdA6GrsmZhAm5gZig/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d3d910ad04bf8748b23e010c7b8a96f_JaffaCakes118

Files

4d3d910ad04bf8748b23e010c7b8a96f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfc9be990d6017f35ee11d8d1d21b7cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetTickCount
GetStartupInfoA
GetModuleHandleA
CreateThread
Sleep

user32

MessageBoxA
PostQuitMessage
DestroyWindow
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
MsgWaitForMultipleObjects
LoadIconA
LoadCursorA

ole32

CoInitialize

gdi32

GetStockObject

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

msvcrt

malloc
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
memcpy
memset
strcpy
??2@YAPAXI@Z
getenv
sprintf
_stricmp
memmove
strcmp
strlen
__CxxFrameHandler
_EH_prolog

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfc9be990d6017f35ee11d8d1d21b7cb

Headers

File Characteristics

Imports

kernel32

user32

ole32

gdi32

msvcp60

msvcrt

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 244KB - Virtual size: 244KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 244KB - Virtual size: 244KB