0501c116952821fa2939713d853834a1_JaffaCakes118

General

Target

0501c116952821fa2939713d853834a1_JaffaCakes118
Size

28KB
MD5

0501c116952821fa2939713d853834a1
SHA1

31219ea2ac06be7e1aa9739100a64d793ea9f090
SHA256

9cfa6429be64116bda9f7afe8f95b5cd1225d16cb3acd200b7f7a4bd7b2d0fa6
SHA512

251091184cc4275376d0c2ca3d1adfbfac4715b8ec198f9a4bb9494c2102f84b248c7f7fc6f8079ffdde7bfc4fd9afe3e16b8cb41a792595fe7c6e8673770587
SSDEEP

768:4ad3BUhiyiQmTMlh70yjzIPAzvC3pAa8Sxm9D:4ad3BUhMTqdjzIYzv1rD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0501c116952821fa2939713d853834a1_JaffaCakes118

Files

0501c116952821fa2939713d853834a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

985d38512cb5433fc84c4c558ffe100c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
CopyFileA
GetPrivateProfileIntA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
CreateDirectoryA
GetStartupInfoA

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

msvcrt

strcpy
_mbsrchr
strlen
_vsnprintf
_purecall
memcpy
__CxxFrameHandler
_mbschr
_access
_snprintf
free
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_mbsnbcpy

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

985d38512cb5433fc84c4c558ffe100c

Headers

File Characteristics

Imports

kernel32

msvcp60

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 836B

.WYCao Size: 20KB - Virtual size: 40KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 836B

.WYCao
Size: 20KB - Virtual size: 40KB