8a7be8eddc04277c40078fb0225989da_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8a7be8eddc04277c40078fb0225989da_JaffaCakes118
Size

10KB
MD5

8a7be8eddc04277c40078fb0225989da
SHA1

e671c9a7b96513bfed0b4e78b35daa8ded78cd86
SHA256

1511dd17f7032a425e947877265ebea6dedb18493b39fe21fecce272939d715b
SHA512

53b7a7ac7987fcc10d2de50d35535695c9c9bdb32705c6a77c857ba8481d868a9623bad6974fe93180335db99e377a3d8dca095cf05e14086a9e559ace50c893
SSDEEP

192:c3RujCYVD1HnBtt+A8vBN5ipn26SzrkON/VQG65I+QxjY:c3RujfLHn0vBN5+26SHkON/VegdY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a7be8eddc04277c40078fb0225989da_JaffaCakes118

Files

8a7be8eddc04277c40078fb0225989da_JaffaCakes118
.exe windows:5 windows x86 arch:x86

808361866fa206bab26d9bd0d2c25afd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opencv_ts240

?ptr@TS@cvtest@@SAPAV12@XZ
?InitGoogleTest@testing@@YAXPAHPAPAD@Z
?GetInstance@UnitTest@testing@@SAPAV12@XZ
?Run@UnitTest@testing@@QAEHXZ

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

_cexit
_exit
_XcptFilter
exit
__initenv
_initterm
_initterm_e
_CxxThrowException
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
__getmainargs
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
??2@YAPAXI@Z
memmove
memcpy
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
_amsg_exit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??0exception@std@@QAE@ABV01@@Z
_configthreadlocale

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

808361866fa206bab26d9bd0d2c25afd

Headers

DLL Characteristics

File Characteristics

Imports

opencv_ts240

msvcp100

msvcr100

kernel32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 692B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 692B