5d02c2dbc14460660b0d3dd2509f078a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5d02c2dbc14460660b0d3dd2509f078a_JaffaCakes118
Size

91KB
MD5

5d02c2dbc14460660b0d3dd2509f078a
SHA1

2148d0c47021bfd9c601d415816202dd36f14a1a
SHA256

85d49ac2051c839d3df8b3724c74cc41cc198bc380f626af3287480a0a830b18
SHA512

676eccb27680a62247bd984be2d948b5b50e0b9e589eb145276494044160e212419d8ea50127038865f5483528f80afd9fc8344e495a1cf12a769adb30a00174
SSDEEP

1536:WHQt5bZFFb09ksiH/WFDmsN349sRMXFmX2Ae9noySYcJHiA:Ldb0910sB49VMHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d02c2dbc14460660b0d3dd2509f078a_JaffaCakes118

Files

5d02c2dbc14460660b0d3dd2509f078a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97ff09d2de2a6d67834b0ec7da6f171d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetTickCount
GetStartupInfoA
GetModuleHandleA
CreateThread
Sleep

user32

SetWindowPlacement
DestroyWindow
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
SetWindowPos
PostQuitMessage
LoadIconA
MessageBoxA
MsgWaitForMultipleObjects
LoadCursorA

ole32

CoInitialize

gdi32

GetStockObject

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

msvcrt

malloc
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_EH_prolog
__CxxFrameHandler
_except_handler3
strcpy
memcpy
??2@YAPAXI@Z
getenv
sprintf
_stricmp
memset
memmove
strcmp
strlen

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97ff09d2de2a6d67834b0ec7da6f171d

Headers

File Characteristics

Imports

kernel32

user32

ole32

gdi32

msvcp60

msvcrt

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 70KB - Virtual size: 70KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 70KB - Virtual size: 70KB