30a8a4f820620ca9c9722c55d84a7771_JaffaCakes118

General

Target

30a8a4f820620ca9c9722c55d84a7771_JaffaCakes118
Size

68KB
MD5

30a8a4f820620ca9c9722c55d84a7771
SHA1

b6208d95a010fd45542a64a35d04aa0ab25849e7
SHA256

213ca24ef7e1e268ffde03e439b57f7a4cefe67dbddd992c9e9ce23b00078e93
SHA512

9db8a6fb666984c899171c86ba4d69778071e4e280848859c4de026cb6d8347eaaa647913203e31310b4891d9fd6bfa98dc0bcdaba4a8cfa7cf9e68b7288e777
SSDEEP

1536:tzA3lSEAJCLNdQ7Yor7jC30ipNMYZFim:CStMOB7jC3iY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30a8a4f820620ca9c9722c55d84a7771_JaffaCakes118

Files

30a8a4f820620ca9c9722c55d84a7771_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca9cd36d27ab7836d64fab01a175fe64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetExitCodeProcess
OpenProcess
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
Module32Next
GetModuleFileNameA
CloseHandle
Module32First
WaitForSingleObject
OpenEventA
OutputDebugStringA
GetModuleHandleA
GetCommandLineA

shell32

SHGetFileInfoA

mfc42

ord1575
ord561
ord815
ord800
ord537
ord2764
ord858
ord4278
ord5683
ord860
ord1168
ord540
ord2818

msvcrt

exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
atol
__CxxFrameHandler
_adjust_fdiv

msvcp60

??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0_Winit@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca9cd36d27ab7836d64fab01a175fe64

Headers

File Characteristics

Imports

kernel32

shell32

mfc42

msvcrt

msvcp60

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 548B

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 548B

.rsrc
Size: 52KB - Virtual size: 52KB