82b3c5875e972b3ee7e56b8f37cf7863_JaffaCakes118

General

Target

82b3c5875e972b3ee7e56b8f37cf7863_JaffaCakes118
Size

36KB
MD5

82b3c5875e972b3ee7e56b8f37cf7863
SHA1

15887b122d24dc5e47f64dfde653f3d20d7ed026
SHA256

1c58d76357b060179c2e17561b4386a90ea35196a08436c642278221441cfbc3
SHA512

79ff4dc7f94c9dc8ed6fb5e4c7b16975d8b2960c6ee1a5e43c6cf39d0d5e466805cca27eac790a7c09309319a49a869604b46c5c78a2a0276c36683c5c5fbf7b
SSDEEP

384:ZYViw8ZnCgikO1Kiq0ZWOCB1FmOmyEd1Ql7i6k2S0JT5Wd9WFiF:kN8ZJiFKiq0Z/CB1YOmyEd1Z6O02+M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82b3c5875e972b3ee7e56b8f37cf7863_JaffaCakes118

Files

82b3c5875e972b3ee7e56b8f37cf7863_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ca621e5b05bb42f6728130d1b83de5d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls

msvcrt

__CxxFrameHandler
fclose
sscanf
fread
srand
fflush
fseek
??3@YAXPAX@Z
_except_handler3
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
rand
??2@YAPAXI@Z
sprintf
fwrite
time
fopen
_memicmp

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

Exports

Exports

add_category_to_category
add_item_to_category
adjust_sub_order
create_default_content
delete_category
delete_content
delete_item
flush_to_disk
get_category_info
get_item_info
get_parent_id
get_root_info
get_version
init
move_category
move_item
uninit
update_category_info
update_item_info
verify_data

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca621e5b05bb42f6728130d1b83de5d8

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcp60

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 778B

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 778B