8702e6b3a872c19dcc20ed9c1f28133e_JaffaCakes118

General

Target

8702e6b3a872c19dcc20ed9c1f28133e_JaffaCakes118
Size

45KB
MD5

8702e6b3a872c19dcc20ed9c1f28133e
SHA1

91f77581002812f8362428e973451ab79d22ab59
SHA256

004e1bdb67cf9a1f195e05cf6e720af8c1068a3cb5322ad7de5bc9d12e8ffe08
SHA512

0db0148a9014bbc1248ba7dea75de2ec103d05aca8355735a4d2117291e5059f502d1497ac5a9c885afb92b5718029acae9faa5dd2c8f54f3e00054d57a1e494
SSDEEP

768:jHKaHfnp8vNfK33o7UoLMU9VW+i0FV15A4xYK7g3GKElnWt1wzrSd11:Xvis3aU0RA+iS1h9UGKEw1Sr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8702e6b3a872c19dcc20ed9c1f28133e_JaffaCakes118

Files

8702e6b3a872c19dcc20ed9c1f28133e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ce9fdd30539c288776a53192b79f1a48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\documents and settings\xload\my documents\visual studio 2010\Projects\_PE_\Release\_PE_.pdb

Imports

kernel32

GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

msvcr100

?terminate@@YAXXZ
_unlock
__dllonexit
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
memset
_lock

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce9fdd30539c288776a53192b79f1a48

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcr100

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 3KB

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 3KB

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 1KB - Virtual size: 1KB