5d66e60c12aa2bd683cc44b1b4318fcf_JaffaCakes118

General

Target

5d66e60c12aa2bd683cc44b1b4318fcf_JaffaCakes118
Size

38KB
MD5

5d66e60c12aa2bd683cc44b1b4318fcf
SHA1

6418214e66222d3cbe206bfc69bfe868d9434a0a
SHA256

22614d504de39a2ac5d0f5935ac97c7244ce216ee5b34c48dc640f4c5ee92d24
SHA512

2a9d81a99903280d20222c786ca31b5dbb14d65b5e7c62d091f01d56b4a3706ec885d4a760e8f27505ae8f43dd258472ad1d7770cdb0ff1c892a61a9adb90a11
SSDEEP

768:VmxrPaPABh0TB6muwg+1EKYsLvU3J4EaHH+fNX8h2cu3NFL+a03:EZcAq6mu3+HNbUZ43+ZuI3s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d66e60c12aa2bd683cc44b1b4318fcf_JaffaCakes118

Files

5d66e60c12aa2bd683cc44b1b4318fcf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9afa272e4cd5956ebd76c14a278106be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ulib

??0FLAG_ARGUMENT@@QAE@XZ
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
??0ARRAY@@QAE@XZ
?Initialize@CLASS_DESCRIPTOR@@QAEEXZ
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
??1OBJECT@@UAE@XZ
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ
?QueryString@WSTRING@@QBEPAV1@KK@Z
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
??1PROGRAM@@UAE@XZ

ntdll

RtlNumberOfSetBits
RtlWriteRegistryValue
_allmul
RtlEnumerateGenericTableWithoutSplaying
RtlDecompressBuffer
RtlNewSecurityObject
NtWriteFile
NtShutdownSystem
RtlMultiByteToUnicodeN
wcscpy
RtlQueryInformationAcl
NtFsControlFile
RtlFormatMessage

msvcrt

_acmdln
_except_handler3
fputs
_iob
__mb_cur_max
??2@YAPAXI@Z
wcscpy
??3@YAXPAX@Z
__set_app_type
_adjust_fdiv
atoi
__getmainargs
malloc
__winitenv
fopen
rand
strncmp

kernel32

LoadLibraryA
GetModuleHandleA
lstrcatW
GetVersionExA
GetFileType
lstrcpyA
GetCommandLineA
LocalAlloc
DeleteFileW
GetFileSize
FlushFileBuffers
lstrlenW
OutputDebugStringA
GetLocaleInfoA
GetVolumeInformationW
GetProcessHeap
GetLocaleInfoW
DeleteCriticalSection
GetFileAttributesW
GetModuleHandleW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9afa272e4cd5956ebd76c14a278106be

Headers

File Characteristics

Imports

ulib

ntdll

msvcrt

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 3KB - Virtual size: 39KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 3KB - Virtual size: 39KB

.rsrc
Size: 1024B - Virtual size: 4KB