532a4feaa1eb3a26abebe9b038ca8f82_JaffaCakes118

General

Target

532a4feaa1eb3a26abebe9b038ca8f82_JaffaCakes118
Size

34KB
MD5

532a4feaa1eb3a26abebe9b038ca8f82
SHA1

07ef70e3b07d6fecb186e17bc19e18ba1076e830
SHA256

1a3ec71eb3f3a80539b3fe89f0f8dc566916f442851447fc9abd690ab2efd228
SHA512

05ae0b2267ef1afe56557531b33f5b1ca77997e598e5b4417ccba2b2e59d00db597b7179d50a782b34e6eae9949fb21f84c80031cce9e501a8293d26b7e292d4
SSDEEP

768:1WKi2frz9NBLM6zcOof7C+V2plpr5jlV2JMK2M60ag:ZDfrz9fLNzcIq8lpr5jlsJM+60ag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
532a4feaa1eb3a26abebe9b038ca8f82_JaffaCakes118

Files

532a4feaa1eb3a26abebe9b038ca8f82_JaffaCakes118
.exe windows:5 windows x86 arch:x86

16c60eb75fea734ef0b7feaa5b92f950

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLastError
OutputDebugStringA
GetTickCount
VirtualProtect
VirtualQuery
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
IsDebuggerPresent

user32

MessageBoxA

msvcr90

_except_handler4_common
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
malloc
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
free
wcsrchr
??3@YAXPAX@Z
strstr
memcpy
??2@YAPAXI@Z
strtok
exit
memset
_initterm
_stricmp

ws2_32

gethostbyname

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16c60eb75fea734ef0b7feaa5b92f950

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcr90

ws2_32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 85KB - Virtual size: 85KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 85KB - Virtual size: 85KB