750dd37b4b8dec3211aaa2c41e648122_JaffaCakes118

General

Target

750dd37b4b8dec3211aaa2c41e648122_JaffaCakes118
Size

160KB
MD5

750dd37b4b8dec3211aaa2c41e648122
SHA1

7edfc21e0fd9375166811ef3ea94c943c64747c5
SHA256

33f8c338ee6cc79f2fa6917880a4cdeeb18590f673086eacfe026c0a9712df1e
SHA512

7542cec5b6993145264185476d33cb089c5b69243137ee5d8505168d76d729258ce45364c7a95905e4a49b145fd2890ad944adb08c301892aa786df73945da5f
SSDEEP

3072:NX+S8qFzJ2nUcq5oxUOoood/6CWfbhaPAtpFwwm1UgJiIPwpAUsa:NuSPFp3oiuoJzWfbhyAtpCwm12m6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
750dd37b4b8dec3211aaa2c41e648122_JaffaCakes118

Files

750dd37b4b8dec3211aaa2c41e648122_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50ac8de0ffe8978197f22af5b529c7b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess
ReadFile
SetFilePointer
CreateFileA
FreeResource
lstrlenA
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
ResumeThread
SetPriorityClass
CreateProcessA
SetThreadPriority
GetCurrentThread
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
lstrcmpiA
CreateToolhelp32Snapshot
GetTickCount
MoveFileExA
WinExec
WritePrivateProfileStringA
DeleteFileA
GetLastError
CreateMutexA
Sleep
GetCurrentThreadId
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

strcat
memset
free
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strchr
_except_handler3
strcpy
strlen
malloc
realloc

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50ac8de0ffe8978197f22af5b529c7b0

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 920B

.rsrc Size: 140KB - Virtual size: 137KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 920B

.rsrc
Size: 140KB - Virtual size: 137KB