2d7a53d826ab30e26de3e9508b5cc175_JaffaCakes118

General

Target

2d7a53d826ab30e26de3e9508b5cc175_JaffaCakes118
Size

1.3MB
MD5

2d7a53d826ab30e26de3e9508b5cc175
SHA1

a3da4e8d763edb22b9e0c2f96c71193b7f29af8a
SHA256

6416faaaff3d53c0543314114092fc7a2f136e4704e02d448577f0c64fd4318c
SHA512

3f2d53ffab19b5332b57619c64fbea89ff4d721ad8d0eba1070ed36ca788e1eb0853f66508232a11eeb1900d28ea0416437e9ca26ca6950cbd9ce27b476fee34
SSDEEP

24576:zu6H1sZ3mJo5xeNYj3dgOPe2ipNmKWYB8YwI:veDzdrriLRWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d7a53d826ab30e26de3e9508b5cc175_JaffaCakes118

Files

2d7a53d826ab30e26de3e9508b5cc175_JaffaCakes118
.exe windows:4 windows x86 arch:x86

860293abff345e550ac6d5bf6796daab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetThreadContext
ReadProcessMemory
ResumeThread
SetThreadContext
SetUnhandledExceptionFilter
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
memset
pow
signal
strcmp
strlen

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetWindowTextA
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
SetWindowTextA
ShowWindow
TranslateMessage

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

test
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

860293abff345e550ac6d5bf6796daab

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 176B

.rdata Size: 8KB - Virtual size: 8KB

.bss Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

test Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 176B

.rdata
Size: 8KB - Virtual size: 8KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

test
Size: 1.3MB - Virtual size: 1.3MB