fc03de03fbd982db9b4c01db439e3074_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fc03de03fbd982db9b4c01db439e3074_JaffaCakes118
Size

183KB
MD5

fc03de03fbd982db9b4c01db439e3074
SHA1

549b62a9a6d96daaff0291f239a7e74e23b1b6b9
SHA256

92b0ae37acb67f161948789d9916dc513ad1288c7678c621ccaae38142396cec
SHA512

83784410f64e5b4e417450b053bae1f55d28566bfc5edb65bbbad96264fa379b65656bfea9eb236799005d4efa71fb084136d0d2f1d269d48889ec71d4567711
SSDEEP

3072:7en6LKIKmgnkYXfLGcJ/QeOTf6AxGoLG32YlhH6Sx79qNBlopyCE2xeJmP3o:7enYxKmgnk26cH2SAs3RhH6V5mgmP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc03de03fbd982db9b4c01db439e3074_JaffaCakes118

Files

fc03de03fbd982db9b4c01db439e3074_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9365a918ef7fc81332135ed734211f07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Heap\Count\Allocate\Memory.exe

Imports

shlwapi

ord155

kernel32

lstrcmpiA
lstrlenA
GetModuleFileNameA

Exports

Exports

?LoadConfig@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?LoadFileIntro@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?LoadHerbalSense@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?LoadInit@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?LoadMultyFilm@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?LoadOriginalMap@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?LoadReconFarm@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?LoadSoapCons@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?LoadSystemTask@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2
Size: 1024B - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.c1
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c4
Size: 1024B - Virtual size: 845B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.c3
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.c5
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9365a918ef7fc81332135ed734211f07

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 112KB

.data Size: 2KB - Virtual size: 2KB

.c2 Size: 1024B - Virtual size: 198KB

.c1 Size: 512B - Virtual size: 156B

.c4 Size: 1024B - Virtual size: 845B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.c3 Size: 29KB - Virtual size: 29KB

.c5 Size: 31KB - Virtual size: 30KB

.text
Size: 112KB - Virtual size: 112KB

.data
Size: 2KB - Virtual size: 2KB

.c2
Size: 1024B - Virtual size: 198KB

.c1
Size: 512B - Virtual size: 156B

.c4
Size: 1024B - Virtual size: 845B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.c3
Size: 29KB - Virtual size: 29KB

.c5
Size: 31KB - Virtual size: 30KB