2e736e419700c5a0570dfacee3740729_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e736e419700c5a0570dfacee3740729_JaffaCakes118
Size

37KB
MD5

2e736e419700c5a0570dfacee3740729
SHA1

2dbefdc2deab99e7e56393b64800799b8daa6c81
SHA256

c5a00e0d55993f23cd1f88cd207207440f65b1d9198740334fcd47b4bcafca3b
SHA512

9fd54ef204f6081d88ac14a2e210f7fb1e25012f78a1349607015d104c7f3a781420e99707baab93d71419ac748e4a67b169cd3c7f51371c4e68c589d2507cd7
SSDEEP

768:GNDIF3Al4+68jrCBjZtNxnha52WLGXxcbPr:GB1lB68cd/WLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e736e419700c5a0570dfacee3740729_JaffaCakes118

Files

2e736e419700c5a0570dfacee3740729_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b081b1a5a6825aec240942e7b3ac8559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetProcAddress
LoadLibraryA
ExitProcess
TerminateProcess
OpenProcess
SetFileAttributesA
GetModuleFileNameA
CloseHandle
SetFilePointer
WriteFile
CreateFileA
QueryPerformanceCounter
GetWindowsDirectoryA
SizeofResource
LockResource
FindResourceA
Sleep
QueryPerformanceFrequency

user32

wsprintfA

msvcp60

?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

msvcrt

free
fclose
fwrite
fopen
__CxxFrameHandler
wcscmp
??2@YAPAXI@Z
atoi

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b081b1a5a6825aec240942e7b3ac8559

Headers

File Characteristics

Imports

kernel32

user32

msvcp60

msvcrt

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 16KB - Virtual size: 16KB

.aspack Size: 4KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 16KB - Virtual size: 16KB

.aspack
Size: 4KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB