b3115b6fdda4dae337ab59ba59458b96_JaffaCakes118

General

Target

b3115b6fdda4dae337ab59ba59458b96_JaffaCakes118
Size

40KB
MD5

b3115b6fdda4dae337ab59ba59458b96
SHA1

26a25a16ca5cd36d74dd3a72ff1bce7796155f92
SHA256

94e266b0105ceb8948f6b1b326bfbe5096ebb5b72a18ccdb9290e5d65a7d2102
SHA512

9f7c78e7064273fb337bc3b30a0f1aafdabf4bb203d4bcd604e61329787725e3d81871f5ab6d8d463658f50010fab3b563b593ebf17d342da5ea8681276a2f2f
SSDEEP

768:ygmeZeZ9I9+XEWyYw2LPsJLWFjBL/K5NqcWxUIRxFKpzlFJiC:YeZQI9WN7QoBL2lWxBdwJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3115b6fdda4dae337ab59ba59458b96_JaffaCakes118

Files

b3115b6fdda4dae337ab59ba59458b96_JaffaCakes118
.exe windows:6 windows x86 arch:x86

d54b3e1062c3eacc8eeec7f1cef2a204

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pathping.pdb

Imports

kernel32

FormatMessageA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
HeapSetInformation
SetThreadUILanguage
LocalAlloc
LocalFree
GetLastError
SleepEx
GetTickCount
GetCurrentThreadId

msvcrt

__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__getmainargs
memset
memcpy
strtoul
exit
_write

iphlpapi

Icmp6SendEcho2
IcmpParseReplies
IcmpSendEcho2
IcmpCloseHandle
Icmp6CreateFile
IcmpCreateFile
Icmp6ParseReplies

user32

CharToOemBuffA

ws2_32

WSACleanup
socket
freeaddrinfo
getnameinfo
inet_addr
WSAStartup
getaddrinfo
closesocket
WSAIoctl

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gtvagau
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d54b3e1062c3eacc8eeec7f1cef2a204

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

iphlpapi

user32

ws2_32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 39KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 28KB - Virtual size: 29KB

gtvagau Size: - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 39KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 28KB - Virtual size: 29KB

gtvagau
Size: - Virtual size: 4KB