JaffaCakes118_3c24b8368d1c03395c4c4b02ebcd1530

General

Target

JaffaCakes118_3c24b8368d1c03395c4c4b02ebcd1530
Size

188KB
MD5

3c24b8368d1c03395c4c4b02ebcd1530
SHA1

64abe6e4a9c9aa859964a4629cc4e6afdd21aec5
SHA256

c9edea36f2fa7e91c2955d489c847a50c391733b3d1c4ad780930aa186d5077c
SHA512

783b239dd059f3eaa28469a83f619d103eaf563b7557c5bf67b770030d0d0bb16c2ebfcc7343de9909dfc7383e567307f72b88ce896a61dc8ebd49edda623b43
SSDEEP

3072:H2KsgypSznWkKrXQ0VHTTlBzK7fa4qR5J6HAb7JUt2lGgHqjuoKfybDgIpenwT1L:WI/znWkKjTTlBzK7fa4qR5J6HQ+twdqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3c24b8368d1c03395c4c4b02ebcd1530

Files

JaffaCakes118_3c24b8368d1c03395c4c4b02ebcd1530
.exe windows:4 windows x86 arch:x86

97ebacdba8761098e923e5b64f6675f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetCurrentProcess
GetLastError
CreateDirectoryA
GetFileAttributesA
DeleteFileA
SetFileAttributesA
GetSystemDirectoryA
Sleep
GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
GetCurrentDirectoryA
GetTempPathA
MoveFileA
SetFileTime
GetFileTime
GetWindowsDirectoryA
WriteFile
GetCurrentThreadId
CreateFileA
SleepEx
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetTickCount
GetShortPathNameA
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentProcessId
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

_except_handler3
memset
memmove
??2@YAPAXI@Z
srand
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strlwr
_strrev
memcmp
memcpy
_ftol
rand
__CxxFrameHandler
_strupr

ws2_32

closesocket
getprotobynumber

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97ebacdba8761098e923e5b64f6675f3

Headers

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 3KB