b2d05a15630ceac89dd1e21e2e214d97_JaffaCakes118

General

Target

b2d05a15630ceac89dd1e21e2e214d97_JaffaCakes118
Size

33KB
MD5

b2d05a15630ceac89dd1e21e2e214d97
SHA1

e3abc165a5e3c7375d7bcbbf58e50c4e8f77ccd6
SHA256

68565b1c680e9bc06297b97e065441540b1ea78bae1b9c4c145202579e0d507e
SHA512

d27e4b05672113815decf3268082bfb9b15349743eaaba1fa103e78f0b02dad3019331164c1cb481ac6597ededacf5bd9eb0f9ad6d52af7ed2023660fbee49e9
SSDEEP

768:JFr6dS7qobDV3DgAOkO2cW7Ax0X6hTwR4:JFrYD8ZDgbVO4TwR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2d05a15630ceac89dd1e21e2e214d97_JaffaCakes118

Files

b2d05a15630ceac89dd1e21e2e214d97_JaffaCakes118
.exe windows:5 windows x86 arch:x86

93e9c8f0c85f5b6b0b09f8dfe06209c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ulib

?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
?Initialize@WSTRING@@QAEEPBDK@Z
??1PATH_ARGUMENT@@UAE@XZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
??0DSTRING@@QAE@XZ
??1STRING_ARGUMENT@@UAE@XZ
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
??1ARGUMENT_LEXEMIZER@@UAE@XZ
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?Fatal@PROGRAM@@UBAXKKPADZZ

kernel32

InterlockedDecrement
LocalAlloc
GetConsoleOutputCP
InterlockedExchange
SetEvent
ResetEvent
GetCurrentThread
GetThreadLocale
InterlockedIncrement
GetDateFormatW
IsBadWritePtr
GetCommandLineW
FindClose
GetConsoleMode
lstrcpynA
GetProcessHeap

ntdll

NtClose
RtlSetGroupSecurityDescriptor
NtReadFile
_alldiv
RtlUnhandledExceptionFilter
NtQueryValueKey

msvcrt

malloc
_acmdln
_adjust_fdiv
_wcsicmp
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
free
wcslen
??2@YAPAXI@Z

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

93e9c8f0c85f5b6b0b09f8dfe06209c7

Headers

File Characteristics

Imports

ulib

kernel32

ntdll

msvcrt

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 2KB - Virtual size: 167KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 2KB - Virtual size: 167KB