41bb235eaee9741ad3a3b1e2a87ef105_JaffaCakes118

General

Target

41bb235eaee9741ad3a3b1e2a87ef105_JaffaCakes118
Size

104KB
MD5

41bb235eaee9741ad3a3b1e2a87ef105
SHA1

435f9ab5972345d08ddc3797942ef5a20a73bd5b
SHA256

f4befde253e964aa1ae29262bebd00645f9935b9f266950a8a2ef360f67bf29e
SHA512

f534d4a4255974aa738f1045999f774e0671e04762712f909945a3e8959f0092cfbceda34b6d29ec6d49f747d0081ebf9e7dd7121c0bbafea9ef915371ab66ff
SSDEEP

3072:Tl/Gi+LFIz/g0Clil9nKDkB7i/qlrLmoNlAH:Tl/Gi+LFIz/g0Clil9nrxrLFlAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41bb235eaee9741ad3a3b1e2a87ef105_JaffaCakes118

Files

41bb235eaee9741ad3a3b1e2a87ef105_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f882511bcb3d06be2cf7dfad76eca99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetConsoleScreenBufferInfo
SetConsoleCtrlHandler
GetComputerNameW
GlobalFree
GlobalUnlock
GetModuleHandleW
GetStdHandle
GetCommandLineW
GetEnvironmentVariableW
SetConsoleMode
GetConsoleMode
WideCharToMultiByte
Sleep
ExitProcess
MultiByteToWideChar
GlobalAlloc
GetVersionExA
LocalFree
FormatMessageW
GetLastError
GlobalLock
GetModuleFileNameW
SetLastError
WriteFile
lstrlenW

user32

LoadStringA
LoadStringW

msvcrt

memcpy
_wsystem
wcstombs
_assert
_fputwchar
time
clock
_wcsnicmp
fgetws
fclose
fflush
fwrite
_dup2
_iob
_wgetenv
wprintf
memset
_wtoi
wcscmp
_wtol
wcsncpy
_setmbcp
_wsetlocale
free
wcscat
wcscpy
malloc
wcslen
_dup
_setmode
rewind
fread
wcstol
_errno
wcschr
__p__fmode
fwprintf
wcsstr
_wcsicmp
fputwc
fputws
_getws
_wmktemp
wcstok
iswctype
realloc
vfwprintf
system
__p___winitenv
ftell
fseek
_wfopen
fopen
memmove
_fdopen
_exit
_XcptFilter
exit
_controlfp
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__set_app_type
_except_handler3

odbc32

ord132
ord176
ord108
ord110
ord61
ord138
ord20
ord127
ord5
ord64
ord111
ord72
ord9
ord141
ord150
ord139
ord75
ord24
ord155
ord31
ord136
ord135
ord43
ord13

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9f882511bcb3d06be2cf7dfad76eca99

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

odbc32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 56KB - Virtual size: 56KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 56KB - Virtual size: 56KB