d62e5ed3a786be8f0d0d8490a1050db1_JaffaCakes118

General

Target

d62e5ed3a786be8f0d0d8490a1050db1_JaffaCakes118
Size

123KB
MD5

d62e5ed3a786be8f0d0d8490a1050db1
SHA1

38cf2d815b47a493a65b726086787c4c52c27090
SHA256

728b9e360b8b178081fd469adf507f0e38c5c1b262ba41d7883052b4f73eccfe
SHA512

202da1c325fdf937043aa2bbe1f291e30c5445edee6e50dbd597ac648c094d66331b018f9bee5c1e4af86c0213918f4fd4161d4775357574159442da5ec89d69
SSDEEP

3072:pewIaCNiEOVFDvKEM9jh1jItmjsLsdGSNpYwt86fymdRGE:8wIaCNiEOVVyhJunLssuYwt7TdRj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d62e5ed3a786be8f0d0d8490a1050db1_JaffaCakes118

Files

d62e5ed3a786be8f0d0d8490a1050db1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fa8e08937570f574be13c871a076d36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
ExitProcess
FreeResource
CloseHandle
SizeofResource
SetFileTime
LocalFileTimeToFileTime
CreateFileA
LoadResource
lstrcpyA
lstrcmpiA
SetLastError
GetFileAttributesA
DeleteFileA
FreeLibrary
GetTickCount
GetTempPathA
ReadFile
SetFilePointer
GetModuleFileNameA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
Sleep
CreateThread
GetCurrentThreadId
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
GetModuleHandleA

msvcrt

strchr
memset
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_CxxThrowException
__CxxFrameHandler
malloc
realloc
_except_handler3
strlen
_strnset

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fa8e08937570f574be13c871a076d36

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 107KB - Virtual size: 107KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 107KB - Virtual size: 107KB