c8d1ec7ad9bd9964bbfb8d8bcca49c1b_JaffaCakes118

General

Target

c8d1ec7ad9bd9964bbfb8d8bcca49c1b_JaffaCakes118
Size

1.4MB
MD5

c8d1ec7ad9bd9964bbfb8d8bcca49c1b
SHA1

4fe3e87c0b486fcbf687010c8712a1f95cfd5f79
SHA256

f1e846d0cd49a87c9b8a4bd7aa2798e15cc51d564402e48429c87ab4ce8f60d7
SHA512

d370a70e4bd933b0e3e6387e5b9df1476d8985fcede5181acc25dfdfebb8645f146bed571e07658a9be0ebd2767b160f35f96e45a9a049983aa730914284375c
SSDEEP

24576:rzmle09qguJ5pq3iR1zeFWD9zs3XVHtcxm00LJmux9X7V+p0dUM+SXICM:r6le09IVqyRlkWD9zs3XdtcxpDuwp0ya

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8d1ec7ad9bd9964bbfb8d8bcca49c1b_JaffaCakes118

Files

c8d1ec7ad9bd9964bbfb8d8bcca49c1b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

418809bc8d602dd78d594dad2aa7ac09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\wamp\www\0bd49f1eef309d60dfeb375c43b82232\Stub\Release\stub.pdb

Imports

kernel32

GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
GetEnvironmentStrings
lstrlenA
LoadLibraryA
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr90

_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
??2@YAPAXI@Z
memset
memcpy
exit
sprintf
__p__fmode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

418809bc8d602dd78d594dad2aa7ac09

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcr90

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 1024B - Virtual size: 550B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 1024B - Virtual size: 550B