e086223a0d825a3b437b25662c0b5ffe_JaffaCakes118

General

Target

e086223a0d825a3b437b25662c0b5ffe_JaffaCakes118
Size

180KB
MD5

e086223a0d825a3b437b25662c0b5ffe
SHA1

b28b121adb3c15b49036c3eb6b42dad977a871cc
SHA256

536fd1dc5705988a3196d77fe154e43c0ece5a36d358dae098c64f05b1ab2a22
SHA512

9da6a53be5c1d78a9b3330a888906bb4d18095cf115c0204100b86accb054d95b9faf65b6216fe2bfd7262b4fbf6f5845c336c9d4ad84d04e62f2507099d0fc9
SSDEEP

3072:vN4vnrmAEN3jbNn5e1bxZ81fpFpCOtfnSOiVB9uUX+ZQHornl5251PJ2:uvrmAEN3jbNn5e1bxZ60OtfSDNXGMorg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e086223a0d825a3b437b25662c0b5ffe_JaffaCakes118

Files

e086223a0d825a3b437b25662c0b5ffe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd5ae39cf259c7e24fbd353b37d12878

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
ExitProcess
GetModuleHandleA
CloseHandle
lstrcmpiA
Process32Next
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
GetCurrentProcess
lstrlenA
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcpyA
SetLastError
DeleteFileA
lstrcatA
GetTempPathA
GetLastError
ReadFile
SetFilePointer
LockResource
CreateDirectoryA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateThread
WinExec
GetCurrentThreadId
Sleep
HeapFree
HeapAlloc
GetProcessHeap
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA

msvcrt

_except_handler3
__CxxFrameHandler
strlen
??3@YAXPAX@Z
realloc
malloc
fclose
fwrite
fopen
strstr
strncat
strcpy
strcat
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memcpy
??2@YAPAXI@Z
memset
strtok
strchr
_strcmpi
_strnset
_strrev
_strnicmp

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd5ae39cf259c7e24fbd353b37d12878

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 152KB - Virtual size: 151KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 152KB - Virtual size: 151KB