5e9f78d4f01246d5b85512be3a4bc5d7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5e9f78d4f01246d5b85512be3a4bc5d7_JaffaCakes118
Size

85KB
MD5

5e9f78d4f01246d5b85512be3a4bc5d7
SHA1

e673a6aafd578d4eade290594ce7d12cfe9a7960
SHA256

3538763172e5e4543622f088d5c5b0e5e467e0d7a68a4c2417e0faac82a86476
SHA512

8b6ed883f66ddf565081d5c899fae78dfda9e14713709c86333cb6543bd43a7979d74abba6b9ad9a64bde215000be78ccd020e95e8d8687dc11c187a5c79e491
SSDEEP

1536:o6jJd/DkySm7bCeaQ4PZH/8ZW8JmCbZiQot9/FL34onWPj+m33p:o6jD/DdFPCeBKsdmcsQot9/cym33p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e9f78d4f01246d5b85512be3a4bc5d7_JaffaCakes118

Files

5e9f78d4f01246d5b85512be3a4bc5d7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94188b616e9132c1ac6fa55fc7058814

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp60

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I_N@Z
?frac_digits@?$_Mpunct@G@std@@QBEHXZ
??Pstd@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
?arg@std@@YANABV?$complex@N@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?scan_not@?$ctype@D@std@@QBEPBDFPBD0@Z
?signaling_NaN@?$numeric_limits@C@std@@SACXZ
_Wcrtomb
_Stof
?sinh@std@@YA?AV?$complex@O@1@ABV21@@Z
??0?$numpunct@G@std@@QAE@I@Z

comctl32

ImageList_Copy
FlatSB_SetScrollRange
DrawStatusTextA
ImageList_DragLeave
CreateToolbarEx
InitCommonControlsEx
ImageList_EndDrag
_TrackMouseEvent
ImageList_LoadImageW
CreatePropertySheetPage
ImageList_SetFlags
ImageList_Merge
DrawStatusTextW
DrawInsert
ImageList_GetDragImage
CreateStatusWindowW

msvcrt20

__threadid
??_Dfstream@@QAEXXZ
_sys_nerr
_itow
iswcntrl
?stossc@streambuf@@QAEXXZ
__STRINGTOLD
wcsncmp
iswupper
_adj_fprem
??_8stdiostream@@7Bostream@@@
?freeze@strstreambuf@@QAEXH@Z
iswlower
_getdcwd

kernel32

HeapSetInformation
SetLocalTime
GetTickCount
AddRefActCtx
CopyFileA
CreateFileMappingW
GetSystemTimeAsFileTime
BaseCleanupAppcompatCacheSupport
GetCurrentProcessId
LoadModule
SetInformationJobObject
GetCurrentThreadId
GetPrivateProfileSectionW
LoadLibraryA
BaseCheckAppcompatCache
QueryPerformanceCounter
SetThreadExecutionState
WritePrivateProfileStringW
GetAtomNameA
LoadLibraryExW
VirtualAlloc
Heap32First

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94188b616e9132c1ac6fa55fc7058814

Headers

DLL Characteristics

File Characteristics

Imports

msvcp60

comctl32

msvcrt20

kernel32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 18KB - Virtual size: 24KB

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 260B

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 18KB - Virtual size: 24KB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 260B