eb72f970903e7fb33833c18c9cb1321b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eb72f970903e7fb33833c18c9cb1321b_JaffaCakes118
Size

995KB
MD5

eb72f970903e7fb33833c18c9cb1321b
SHA1

caf0571ede7969218326b1ce863f7416e76395d7
SHA256

39eea9b3cd9c3ac6b908120b95251a367508ba804310a77347cd2a698cc73f69
SHA512

91a027ab51474059485fb338f8bb9f4f33d2d38f95a67c6bfc69700487c02c2882d607aa801bcc34f07df2bd6144b37ceae6827be6a749ebd8f19d5c367df006
SSDEEP

24576:e8Tn9EiTwFfdfxli33yRt+u4SODKeVUsHR1J:FS2wrfx03KaSODNRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb72f970903e7fb33833c18c9cb1321b_JaffaCakes118

Files

eb72f970903e7fb33833c18c9cb1321b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b949ed76fa10c6fb9df3d1f4576f17b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wcslwr
_wcsnicmp
__dllonexit
_XcptFilter
strchr
exit
__CxxFrameHandler
_itoa
realloc
_itow
strncmp
_exit
atoi
_initterm
__set_app_type
vwprintf
_onexit
iswspace
_vsnprintf
_adjust_fdiv
_c_exit
_CxxThrowException
wcslen
wcsrchr
??2@YAPAXI@Z
__wgetmainargs
free
??3@YAXPAX@Z
_snwprintf
_purecall
fputs
__p__commode
??1type_info@@UAE@XZ
_vsnwprintf
__p__fmode
__setusermatherr
wcsstr
memset
_cexit
?terminate@@YAXXZ
__winitenv
qsort
_wcsicmp
_except_handler3
_controlfp
_iob
_snprintf

ole32

StringFromCLSID
StringFromIID
CoCreateInstance
CLSIDFromString
CoTaskMemFree
CoUninitialize
CoInitialize

user32

CharNextW
wsprintfW
CharNextA

imagehlp

ImageDirectoryEntryToData
ImageNtHeader
ImageRvaToVa
ImageGetDigestStream

shell32

CommandLineToArgvW

msvfw32

ICGetInfo
ICRemove

kernel32

LoadLibraryExA
GetThreadLocale
ReadFile
CopyFileW
FreeResource
GetFileAttributesA
RaiseException
FindNextFileW
UpdateResourceW
CloseHandle
LoadLibraryExW
RemoveDirectoryW
LocalFree
GetACP
GetOEMCP
GetFullPathNameA
lstrcmpiA
GetModuleHandleW
GetVersionExW
FreeLibrary
lstrcpyA
lstrlenW
GlobalFree
EndUpdateResourceW
GetEnvironmentVariableA
GetFullPathNameW
InterlockedIncrement
WideCharToMultiByte
OutputDebugStringA
InterlockedDecrement
SetFilePointer
IsDebuggerPresent
GlobalAlloc
GetVersion
BeginUpdateResourceW
GetSystemDirectoryA
ExitProcess
GetFileInformationByHandle
RemoveDirectoryA
DebugBreak
InterlockedExchange
GetLocaleInfoA
FindClose
CopyFileA
InterlockedCompareExchange
lstrlenA
GetFileAttributesW

Sections

.text
Size: 707KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b949ed76fa10c6fb9df3d1f4576f17b3

Headers

File Characteristics

Imports

msvcrt

ole32

user32

imagehlp

shell32

msvfw32

kernel32

Sections

.text Size: 707KB - Virtual size: 706KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 251KB - Virtual size: 251KB

.rsrc Size: 32KB - Virtual size: 3.2MB

.text
Size: 707KB - Virtual size: 706KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 251KB - Virtual size: 251KB

.rsrc
Size: 32KB - Virtual size: 3.2MB