JaffaCakes118_430bb75757edc01d36a6113a671cedca

General

Target

JaffaCakes118_430bb75757edc01d36a6113a671cedca
Size

188KB
MD5

430bb75757edc01d36a6113a671cedca
SHA1

5dbfddd594dc5884a2c05283eebb0b7808ac8ba8
SHA256

f49172c7efc124fcd4dc973d47ad9f5be31e35128df3186dee2d77a8ed390efe
SHA512

bd956b621831231ae429ddc18e980f098c8e1083e8fcdc78500150762056e4a219999159a629571f44bc231519aba65ba790dee3015f0db26ae1b5a68d35cf7b
SSDEEP

3072:Za4DujnW0ynJ50xJNDatlSvsMkSs0+tvIwSJU3ETY6J9bn/Em9hJ0:4PnWN30xJNDatcUMeh6WEVb/9hJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_430bb75757edc01d36a6113a671cedca

Files

JaffaCakes118_430bb75757edc01d36a6113a671cedca
.exe windows:4 windows x86 arch:x86

94166e5443f23534f9a0635510057b84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
Sleep
ExitProcess
GetCurrentDirectoryA
GetTempPathA
MoveFileA
CloseHandle
SetFileTime
GetFileTime
WriteFile
GetTickCount
CreateFileA
GetSystemDirectoryA
SleepEx
LoadLibraryA
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetFileAttributesA
GetShortPathNameA
ExpandEnvironmentStringsA
OpenEventA
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentProcess
CreateDirectoryA
lstrlenA
DeleteFileA
SetFileAttributesA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

strlen
strstr
rand
memcpy
??2@YAPAXI@Z
srand
__CxxFrameHandler
strrchr
strcmp
strncpy
_ftol
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
_strrev
memset
strcpy
strchr
_except_handler3
strcat
_strlwr

ws2_32

closesocket

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94166e5443f23534f9a0635510057b84

Headers

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 1KB