b15add954d8b7e3b9780a171e0d25b46_JaffaCakes118

General

Target

b15add954d8b7e3b9780a171e0d25b46_JaffaCakes118
Size

144KB
MD5

b15add954d8b7e3b9780a171e0d25b46
SHA1

c2d61b77e5a2f7ce29d5250eb4e29a94b6338255
SHA256

6151b3228ce229cb00b4ce979d7a6d29866bb33bbccc5a4d69d3e763b01066a3
SHA512

c677d02361677bf0040f8b31395e9c90d836b3f92bca039f7f5367c5d78cf75c03f68226f960fefa54d49920af7f02f229564a1f4cc7940ba7765f2565c7a9a0
SSDEEP

3072:29gFcjxpZTBf5TCvhmO2a2RkHkoqHLAxUQo73UxmJiQcU/fAWa:ZcFpZTBRTCvwuUkHssxUXkQ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b15add954d8b7e3b9780a171e0d25b46_JaffaCakes118

Files

b15add954d8b7e3b9780a171e0d25b46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a55a66f96b091e1dd9e9bf03728584a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
strncpy
__CxxFrameHandler
strcmp
strstr
memset
strchr
_ftol
srand
malloc
free
_strlwr
_strrev
_stricmp
rand
_except_handler3
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
strlen

kernel32

LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetCommandLineA
SetUnhandledExceptionFilter
OpenEventA
ExpandEnvironmentStringsA
SleepEx
GetShortPathNameA
CreateEventA
WaitForSingleObject
GetModuleFileNameA
CreateFileA
WriteFile
GetFileTime
SetFileTime
MoveFileA
GetCurrentDirectoryA
GetTempPathA
GetWindowsDirectoryA
SetEnvironmentVariableA
ExitProcess
Sleep
GetModuleHandleA
GetProcAddress
CloseHandle
GetCurrentProcess
GetLastError
CreateDirectoryA
GetFileAttributesA
lstrlenA
DeleteFileA
SetFileAttributesA
GetTickCount
GetSystemDirectoryA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a55a66f96b091e1dd9e9bf03728584a

Headers

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 96KB - Virtual size: 97KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 96KB - Virtual size: 97KB

.rsrc
Size: 4KB - Virtual size: 3KB