05b6482800312edb1d0fa498bab793ef_JaffaCakes118

General

Target

05b6482800312edb1d0fa498bab793ef_JaffaCakes118
Size

229KB
MD5

05b6482800312edb1d0fa498bab793ef
SHA1

284fcf9e9916aab555509b198704da04f94611e8
SHA256

81f59c6bdcccd1a6ef7f509d2538add5ab38490d0e943aa8e5ddb927878bb48e
SHA512

3ffbafb7e34231bd9635cf2aa0d2eed7e18b6e2708bca5014c5b4f0deadb673dbe86308a489c05ccd6c83f133dea6d077fec2c7d2b1fac188a396207b2d4bb0e
SSDEEP

3072:Pv3zPqaf8CU7pvnaCOSxKpf3fEfV1Cq2/8mWlZPN46+C2/NHednG:j9fLU7pfaCOScoyqs8mWLVr+J1Heo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05b6482800312edb1d0fa498bab793ef_JaffaCakes118

Files

05b6482800312edb1d0fa498bab793ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30fefd9a63a6426f5b6938888510567d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\src\converter\RealConverter.pdb

Imports

ole32

OleInitialize
OleUninitialize

kernel32

CloseHandle
GetLastError
CreateMutexA
FreeLibrary
GetProcAddress
LoadLibraryA
ReleaseMutex
GetModuleFileNameA
GetFileAttributesA
CreateDirectoryA
SetEnvironmentVariableA
GetStartupInfoA
GetModuleHandleA
SetErrorMode

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

msvcr71

_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z
tolower
strncpy
strchr
strtol
strncat
wcslen
_vsnprintf
getenv
__CxxFrameHandler
sprintf
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_mbctype
isupper
_purecall
_putenv
strrchr

user32

GetSystemMetrics

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

30fefd9a63a6426f5b6938888510567d

Headers

File Characteristics

PDB Paths

Imports

ole32

kernel32

advapi32

msvcr71

user32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 96KB - Virtual size: 92KB

.rrdata Size: 68KB - Virtual size: 68KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 96KB - Virtual size: 92KB

.rrdata
Size: 68KB - Virtual size: 68KB