638f35448d2d2512cc7331fdf27979cc_JaffaCakes118

General

Target

638f35448d2d2512cc7331fdf27979cc_JaffaCakes118
Size

84KB
MD5

638f35448d2d2512cc7331fdf27979cc
SHA1

18d6f43e2428bedd2de8a0351e40927f6020d161
SHA256

69fc006a99bf4c2ec8c3742d4f64f6b021cbbfa62b1bc5e23fdd51faa62f4616
SHA512

3997d58fbc2d5486035ea8582599bd3107b8b3a747cc8d8eb92e30861beed5fbac1ff321ca67f16c8b91106c4b99a814182899093c6bfec1e5014e795686a89f
SSDEEP

1536:30ytQeu2PPb8RknhI2GG/gaVJReoIeB+DOGG8eM:30SulRknhz3ggJooIegDIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
638f35448d2d2512cc7331fdf27979cc_JaffaCakes118

Files

638f35448d2d2512cc7331fdf27979cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aabd348fd4029713f3bdf9f520391218

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
InterlockedExchange
GetVolumeInformationW
SetLastError
ExitProcess
GetCurrentProcessId
GetFileTime
GetDiskFreeSpaceW
FindCloseChangeNotification
FindFirstChangeNotificationW
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
WriteConsoleA
GetStartupInfoA

ole32

OleSetContainedObject
CoUninitialize
CoInitialize
CoRevokeClassObject

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

msvcr71

_exit
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
wcslen
exit
fclose
__p__commode
fputs
fseek
fopen
free
realloc
malloc
_c_exit
fwrite
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ubsjthf
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aabd348fd4029713f3bdf9f520391218

Headers

File Characteristics

Imports

kernel32

ole32

version

msvcr71

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 5KB - Virtual size: 62KB

.rsrc Size: 28KB - Virtual size: 29KB

ubsjthf Size: - Virtual size: 4KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 5KB - Virtual size: 62KB

.rsrc
Size: 28KB - Virtual size: 29KB

ubsjthf
Size: - Virtual size: 4KB