2c744437718b689a64e8a4b262291fba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2c744437718b689a64e8a4b262291fba_JaffaCakes118
Size

673KB
MD5

2c744437718b689a64e8a4b262291fba
SHA1

ad405fc2dd0aef5f6214f17b01baed19489ebab6
SHA256

01c271c0f9a82448bb268824a6dd63c008878433121815d38e8ec0534563e6bc
SHA512

bdec856c60e4327f0f78d0773320a78726facbecf26a2c5a6b067fb5237bd2fce1494b3c0e1f96c7ffab6ea911ede5b4465764cdb5b9234ecb84d5b74378fabd
SSDEEP

12288:2vOJU5T+sdYCpTKrweJJ1GPQRt3pU8ZW0nqPqUo7Fu93Z99Mwo0:uOJU5HYCtcJJ+ote1qUeFcpXMA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c744437718b689a64e8a4b262291fba_JaffaCakes118

Files

2c744437718b689a64e8a4b262291fba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e27991bb1faa865d07e322c98c6ad9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Source\Wdprj\WDExe\Release\WDExe.pdb

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
isdigit
vsprintf
_mbclen
_mbsinc
_ismbcspace
atoi
realloc
_mbspbrk
_mbsrchr
_makepath
memmove
_mbsstr
wcscat
wcslen
wcschr
_mbschr
memchr
_vsnprintf
_purecall
_mbscmp
strcat
_mbsnbcpy
sprintf
strlen
strncmp
strcpy
_stricmp
_mbsicmp
memcpy
memset
free
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException

kernel32

GetTempPathA
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
CreateThread
TerminateThread
ResumeThread
MultiByteToWideChar
GetCurrentThreadId
TlsFree
TlsAlloc
VirtualProtect
VirtualQuery
TlsGetValue
TlsSetValue
GetModuleHandleA
GetFullPathNameA
GetVersionExA
FindNextFileA
GetFileAttributesA
FindClose
FindFirstFileA
CreateDirectoryA
CopyFileA
MoveFileA
DeleteFileA
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
SetFilePointer
WriteFile
SetLastError
CreateFileA
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateMailslotA
ExpandEnvironmentStringsA
GetLocalTime
GetComputerNameA
GetProfileStringA
ReadFile
CreateFileMappingA
GetLastError
CloseHandle
MapViewOfFile
UnmapViewOfFile
LoadLibraryA
GetModuleFileNameA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetCurrentProcessId
FindResourceA
LoadResource
LockResource
FreeResource
FreeLibrary
CreateEventA
GetTempFileNameA
OpenFileMappingA
GetProcAddress
GetSystemDefaultLangID
FormatMessageA
LocalFree
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCommandLineA
CreateProcessA
Sleep
GetMailslotInfo
GetExitCodeProcess

Exports

Exports

CommandeComposante
DeclareProxy

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e27991bb1faa865d07e322c98c6ad9c

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 80KB - Virtual size: 76KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 80KB - Virtual size: 76KB