b07cf2bb96ccebfe563c6c8f7046143a_JaffaCakes118

General

Target

b07cf2bb96ccebfe563c6c8f7046143a_JaffaCakes118
Size

50KB
MD5

b07cf2bb96ccebfe563c6c8f7046143a
SHA1

888fd746d6271b8a4c8b8860bf8baab923096efc
SHA256

35db8e6a2eb5cf09cd98bf5d31f6356d0deaf4951b353fc513ce98918b91439c
SHA512

cdb92343ca30c24f1448eeb19be7546de49ac16c859aad606b397daa8c8733eaa2f74b0ba7946e8e8387d7e9f7d9d7b49ab3d333b1c20b569521c9ca40139f99
SSDEEP

768:qhaxd/cb7d8NQfxjLFd5mYlscxRWRWkUaFKu3I5sQn1vUuCD2ajESxIUSxP9kH:qhaxdkEQfxjJTspRWkMoUsq5pagzUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b07cf2bb96ccebfe563c6c8f7046143a_JaffaCakes118

Files

b07cf2bb96ccebfe563c6c8f7046143a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39bdb4a2aefc14cdab6f28e6dd1865ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
FreeLibrary
GetModuleHandleA
CloseHandle
CreateFileA
GetEnvironmentVariableA
SetFileAttributesW
CreateDirectoryW
MoveFileExW
GetWindowsDirectoryW
GetModuleFileNameW
GetTickCount
ReadFile
SetFilePointer
CreateFileW
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
VirtualProtect
InitializeCriticalSection
GetStartupInfoA

user32

wsprintfW

shell32

ShellExecuteA

msvcp60

??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z

msvcrt

_exit
_controlfp
memcpy
strlen
memset
??2@YAPAXI@Z
strcat
wcscat
rand
srand
strcpy
calloc
free
__dllonexit
_onexit
_memicmp
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Exports

Exports

szFile

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39bdb4a2aefc14cdab6f28e6dd1865ac

Headers

File Characteristics

Imports

kernel32

user32

shell32

msvcp60

msvcrt

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 30KB - Virtual size: 30KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 1KB - Virtual size: 1KB