JaffaCakes118_09f72a4a909b52d3600fe3f06812ecc6

General

Target

JaffaCakes118_09f72a4a909b52d3600fe3f06812ecc6
Size

132KB
MD5

09f72a4a909b52d3600fe3f06812ecc6
SHA1

c897b9768ae06c93c52c81a47a1b3f63244a686b
SHA256

5a8ee4fe55d13eb742d3740db878447db320919eb8701556fb9672534d8a8025
SHA512

646867907044eb88d1c8d87cae1a8fcd5ace551e7828d87f36fed0ec63c8767381574249bde71c6b101c452dc879a53a3a5e8598bad7dbadcae4390bb3aa253f
SSDEEP

1536:3tYI/Dx7QKCHbC16dvOY4KOgKSllNPYgTUUkhVnKCJ4lsIJ3khY5d3SLad:3t97D0bkRts/QiPkh1Kxl4hmTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_09f72a4a909b52d3600fe3f06812ecc6

Files

JaffaCakes118_09f72a4a909b52d3600fe3f06812ecc6
.exe windows:4 windows x86 arch:x86

385c968b57193ea3eac08e5b3f608d58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
AddAtomW
CreatePipe
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fopen
fprintf
free
malloc
signal
sin
strcmp

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage

comctl32

InitCommonControls

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

385c968b57193ea3eac08e5b3f608d58

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

comctl32

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 104KB - Virtual size: 104KB

.rdata Size: 14KB - Virtual size: 13KB

.bss Size: - Virtual size: 480B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 744B

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 104KB - Virtual size: 104KB

.rdata
Size: 14KB - Virtual size: 13KB

.bss
Size: - Virtual size: 480B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 744B