5d25939e15d24780c474e574196c10d2_JaffaCakes118

General

Target

5d25939e15d24780c474e574196c10d2_JaffaCakes118
Size

267KB
MD5

5d25939e15d24780c474e574196c10d2
SHA1

7089f4faeafe230494f93b06cd31cfcfa63a1882
SHA256

7d876a3bbf042c299aaa414ac1dd60c4c6aa1a8abd6d41cdee15640fa73e4b56
SHA512

356e885702957bb6e041015da8c89f6638b9dabffc8db6084c9656d2621e2ca478eb0cc4fcde5521a64bbf1ee3217e45c4f83536057123e474affa2cb3150c0f
SSDEEP

6144:K0jzHo66nfZD6bcJQFBGoWL1e5SjizwJ+MLglvO6TovUyEpR:K0jzI66fZWBgReoizwtUlW6svUx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d25939e15d24780c474e574196c10d2_JaffaCakes118

Files

5d25939e15d24780c474e574196c10d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fb01f625d41ab138d1e2ed408fb956c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
CopyFileA
GetPrivateProfileIntA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
CreateDirectoryA
GetStartupInfoA

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

gdiplus

GdiplusStartup
GdiplusShutdown

msvcrt

__CxxFrameHandler
strcpy
_mbsrchr
strlen
_vsnprintf
??2@YAPAXI@Z
memcpy
_mbsnbcpy
_mbschr
_access
_snprintf
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_purecall

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

W
Size: 238KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2fb01f625d41ab138d1e2ed408fb956c

Headers

File Characteristics

Imports

kernel32

msvcp60

gdiplus

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 904B

.rsrc Size: 21KB - Virtual size: 20KB

W Size: 238KB - Virtual size: 240KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 904B

.rsrc
Size: 21KB - Virtual size: 20KB

W
Size: 238KB - Virtual size: 240KB