e046662e7bddbeb77c9e7608565ab30e_JaffaCakes118

General

Target

e046662e7bddbeb77c9e7608565ab30e_JaffaCakes118
Size

201KB
MD5

e046662e7bddbeb77c9e7608565ab30e
SHA1

f4d821934d9787ace43951a711db267f609cde1a
SHA256

80a160b902e5d17a92c15bbf79912639cc6864e123833766e0bee3885903ee8a
SHA512

8b33b651027cca31943be162ae3f4d6bca62ca33c617f5732a83887b5a3a713c604b020e2597d22e1304f514c309d70acba5d6031c4c2746c20d1b0667819a7b
SSDEEP

3072:HjERkqnwDDqZRwLz6eZkBEH4V3V9b5QTfvXDywZUZ9GxCp5:DERkM8z8K26THXG4UZ9GxCD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e046662e7bddbeb77c9e7608565ab30e_JaffaCakes118

Files

e046662e7bddbeb77c9e7608565ab30e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b4fc0252fe6e3e96c3f54a8359e4b58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_~1\jdk6_13\control\build\WINDOW~1\tmp\sun\com.sun.java.util.jar.pack\unpack\unpack200.pdb

Imports

msvcr71

free
realloc
memchr
memcmp
strlen
strcat
strncat
strchr
fflush
fclose
_iob
fprintf
qsort
exit
sprintf
strcmp
time
atoi
fopen
strrchr
strcpy
abort
malloc
_errno
calloc
gmtime
fread
strtok
getenv
strncmp
remove
_c_exit
_exit
_XcptFilter
_cexit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
memset
fwrite
memcpy
_tempnam
_mkdir
_strdup
_fileno

kernel32

GetTempPathA
GetModuleHandleA

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3b4fc0252fe6e3e96c3f54a8359e4b58

Headers

File Characteristics

PDB Paths

Imports

msvcr71

kernel32

Sections

.text Size: 84KB - Virtual size: 80KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 12KB - Virtual size: 11KB

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.0rdata Size: 72KB - Virtual size: 72KB

.text
Size: 84KB - Virtual size: 80KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 11KB

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB

.0rdata
Size: 72KB - Virtual size: 72KB