aa72108fc0944a0aa560b203eeebfe0f_JaffaCakes118

General

Target

aa72108fc0944a0aa560b203eeebfe0f_JaffaCakes118
Size

168KB
MD5

aa72108fc0944a0aa560b203eeebfe0f
SHA1

c0f6665554c9c5d580ff4e5b9c0bfe2a04999734
SHA256

fd0073ae5bc478d789a602004190c3a5d2c91d9283ffef9503a9c1a246bbdf7a
SHA512

066c43f6fa0db15b31c69f7864ae4484f7527f839c79dce28fc5b7ac8c5339aa2470e008906be116c79c8462c229fca9cffd3d123e5069badb1bb58ebe831e4f
SSDEEP

3072:mxIIWAEl2I2HgAF2YZJYKarjx45v6cHHvbuyZmxZgEfVuc4Jq0GiWsrw3:miroI2HrFDZJYKa3e5icyyZmAE9RADfe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa72108fc0944a0aa560b203eeebfe0f_JaffaCakes118

Files

aa72108fc0944a0aa560b203eeebfe0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc670c6a9cb95303d18b84748483f1ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp60

?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ

mfc42

ord665
ord1979
ord1168
ord3180
ord5186
ord354
ord800

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
free
remove
toupper
_strupr
sprintf
memchr
printf
__setusermatherr

kernel32

GetStartupInfoA
GetExitCodeProcess
CreateProcessA
TerminateProcess
OpenProcess
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
Sleep
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
CloseHandle

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteKeyA

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc670c6a9cb95303d18b84748483f1ad

Headers

File Characteristics

Imports

msvcp60

mfc42

msvcrt

kernel32

advapi32

shell32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 152KB - Virtual size: 150KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 152KB - Virtual size: 150KB