ff2f28b942ed063ccbbc83b28e0d6795_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ff2f28b942ed063ccbbc83b28e0d6795_JaffaCakes118
Size

60KB
MD5

ff2f28b942ed063ccbbc83b28e0d6795
SHA1

45b463608c3207328b0b905290824273eb884cfd
SHA256

737d6a399442818929f7fa973671ecc028a0cda496183ff7d9efcb486326bf5b
SHA512

28938067670480794f6265cadc55dbbee44c4369bf84137c2c54b3a2ff455d52628d47795af6ee69d0e32c6456cbc1cc91dba517a2bc58b23f604f67c3c9cdae
SSDEEP

768:jQ5QrWw4Gup5nPYREpvC7IsLN7WxR1chtL6bySYiy55KlyQe81mZSRV9:jQ5OW53wREpvM9O4hIJ1y5g1oc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff2f28b942ed063ccbbc83b28e0d6795_JaffaCakes118

Files

ff2f28b942ed063ccbbc83b28e0d6795_JaffaCakes118
.exe windows:6 windows x86 arch:x86

28e4879e0a20ad6e1f1c42be5b5823db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\C++\University\2 course\MP3vIS\Project1\Release\Project1.pdb

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
Sleep

vcruntime140

__current_exception_context
memset
_except_handler4_common
__std_type_info_destroy_list
__FrameUnwindFilter
__current_exception

api-ms-win-crt-runtime-l1-1-0

exit
_exit
abort
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_get_narrow_winmain_command_line
_configure_narrow_argv
_initterm_e
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_controlfp_s
terminate
_set_app_type
_initterm
_seh_filter_exe
_initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28e4879e0a20ad6e1f1c42be5b5823db

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

mscoree

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 1024B - Virtual size: 716B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 1024B - Virtual size: 716B