b47bc847ad1f4bb12ccc3eaa392ee5ac_JaffaCakes118

General

Target

b47bc847ad1f4bb12ccc3eaa392ee5ac_JaffaCakes118
Size

411KB
MD5

b47bc847ad1f4bb12ccc3eaa392ee5ac
SHA1

96c53e30cd9e4cad4ce5340c469ea24f2b1d3511
SHA256

155f58ada32d4c547ac167c440d96829ee7ebf1ac9b47244690b177b89923b8b
SHA512

4d326b7bf355e23c04f6be406cd040c90379334c4ca7b4dc9b7b552bd2491a3e8746c1f021be4b61caba052f88cfb628d8ab19a323148a50fbf329f3aa7d252b
SSDEEP

12288:PdNU33VR6fypBUuXYgKK+9CpHzTDO51nQi:P3UHOKpbognpHXK11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b47bc847ad1f4bb12ccc3eaa392ee5ac_JaffaCakes118

Files

b47bc847ad1f4bb12ccc3eaa392ee5ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

335a08950cd1dab5838244fc6c075cee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
SetUnhandledExceptionFilter
CloseHandle
UnmapViewOfFile
GetVersionExA
MapViewOfFile
OpenFileMappingA
OpenEventA
OpenMutexA
ReleaseMutex
SetEvent
ResetEvent
WaitForSingleObject
GetLastError
DisableThreadLibraryCalls
LocalFree
CreateFileMappingA
CreateMutexA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LocalAlloc
CreateFileW
GetLocalTime
InterlockedCompareExchange
InterlockedExchange
lstrcatW
lstrlenW
lstrcpynW
GetCommandLineA
VirtualProtect
VirtualFree
ExpandEnvironmentStringsA
VirtualAlloc
GetModuleHandleA
GetStartupInfoA

advapi32

DeregisterEventSource
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegisterEventSourceA
RegCloseKey

msvcr71

malloc
wcstoul
free
sprintf
_amsg_exit
_initterm
_XcptFilter
atoi
memcpy
_snprintf
_c_exit
_exit
_ismbblead
_cexit
exit
_acmdln
__getmainargs
__setusermatherr
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
_adjust_fdiv

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 389KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

335a08950cd1dab5838244fc6c075cee

Headers

File Characteristics

Imports

kernel32

advapi32

msvcr71

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 389KB - Virtual size: 778KB

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 389KB - Virtual size: 778KB

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 1KB - Virtual size: 1KB