d674fc237cc36e95e5200ea4a6616a4c_JaffaCakes118

General

Target

d674fc237cc36e95e5200ea4a6616a4c_JaffaCakes118
Size

748KB
MD5

d674fc237cc36e95e5200ea4a6616a4c
SHA1

9265ba52fa9b0e765a4b9bff720ac1354827f47d
SHA256

6756a5cea15e5e413577ca9610431892b581c8eed61cd1d25765f9570e19117c
SHA512

fbceb17f2a3c12b03966215ce1271e3cf06273b2d3961979db53d01485d95f0ec799fdcbee7998bb76c8e48a036361a7bd505e00894e5717d4d997dae382e878
SSDEEP

12288:ECUfbCSI5g528OqvQfvfvkrJjCG+2W5t39/pR8Gaxfuy0W1PQudf+W3uJZKWm7OV:pobCSOGvGktjxW5t39/XQhEkWdQ0o4Mg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d674fc237cc36e95e5200ea4a6616a4c_JaffaCakes118

Files

d674fc237cc36e95e5200ea4a6616a4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

844518cd65b18f050eb20f86bac49dc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
TerminateProcess
GetProcAddress
VirtualAlloc
ExitProcess
GetTickCount
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA

msvcp60

??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

strlen
__CxxFrameHandler
_ftol
pow
atan2
??2@YAPAXI@Z
atan
printf
tanh
memcpy
floor
log
cosh
cos
fmod
exp
ceil
log10
fabs
sinh
tan
acos
asin
sin
strcpy
strcat
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sqrt

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 724KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

844518cd65b18f050eb20f86bac49dc4

Headers

File Characteristics

Imports

kernel32

msvcp60

msvcrt

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.pdata Size: 724KB - Virtual size: 844KB

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.pdata
Size: 724KB - Virtual size: 844KB