0aef706f3df9a37ae4a819fdbca9af49_JaffaCakes118

General

Target

0aef706f3df9a37ae4a819fdbca9af49_JaffaCakes118
Size

104KB
MD5

0aef706f3df9a37ae4a819fdbca9af49
SHA1

5386efb2c5a47a81e203050aa5f2c175ebabd28f
SHA256

bdc155dd48ae43f7ae6ceafc4ff16d135809ca5aec15fba13ba03b373f04b0f4
SHA512

17d1f42ac0c582ee54b239b006975afee4f89b6f6ecd42201189f38f8781038376c83586c2ee0916430985e0ba4bb60087e4426945c0614ec5b26398e75a23ad
SSDEEP

1536:qTf0ICVfN013g/Z0Z8OLkE2X9u0nOjl6UEFvCuf4HD533a5MQxO7LeRiAfLiJaKp:qUftZ0Z8OxsnMQUNHN336MdMfLira8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aef706f3df9a37ae4a819fdbca9af49_JaffaCakes118

Files

0aef706f3df9a37ae4a819fdbca9af49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fa40822e80b213231915976d64fadfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strncmp
strncpy
_ftol
malloc
free
modf
??3@YAXPAX@Z
??2@YAPAXI@Z
_CIpow
strtod
tolower
sprintf

user32

GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
MsgWaitForMultipleObjects
KillTimer
SetTimer
wsprintfA

kernel32

IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA
GetProcessHeap
RtlFillMemory
lstrlenA
GetProcAddress
LoadLibraryA
VirtualFree
LCMapStringA
CreateFileA
WriteFile
VirtualAlloc
WideCharToMultiByte
CreateWaitableTimerA
SetWaitableTimer
CloseHandle
RtlMoveMemory
MultiByteToWideChar

shlwapi

StrToIntExA

ntdll

RtlCompareMemory

ole32

CoInitialize
CoUninitialize
OleRun
CoCreateInstance
CLSIDFromString
CLSIDFromProgID

oleaut32

VariantClear
VariantChangeType
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
LoadTypeLi
RegisterTypeLi
SafeArrayCreate
SafeArrayDestroy
SysAllocString

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7fa40822e80b213231915976d64fadfa

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

shlwapi

ntdll

ole32

oleaut32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 28KB - Virtual size: 24KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 28KB - Virtual size: 24KB

.rsrc
Size: 8KB - Virtual size: 4KB