JaffaCakes118_b341048550c301ee95c8a58c5fdbe8f5

General

Target

JaffaCakes118_b341048550c301ee95c8a58c5fdbe8f5
Size

200KB
MD5

b341048550c301ee95c8a58c5fdbe8f5
SHA1

213c35b7f693a39a378544811c671a746dc73a9d
SHA256

a663daf8e3e258246aa9c5979e110f0bc00cd4c7efb95932557998af9aa6f05f
SHA512

9705ac5ffa44e20ab1c6a169e39756d46b100e29c4f17cc83a01d131823b2ecfe746d0ed9550685013b0fa52df6c9f2ece6b057aad687ddfc1117899acc44ea7
SSDEEP

3072:j90cin+tQmBJCHBgyAc8/YKyCyWXNxdBBXaQczOvcP81eWReAtK2MgfbiEI:J0NnJ6JCh8/YK3XtkmZkAtRfbiE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b341048550c301ee95c8a58c5fdbe8f5

Files

JaffaCakes118_b341048550c301ee95c8a58c5fdbe8f5
.exe windows:6 windows x86 arch:x86

0327a3b06807a2b22d59b9d0f00f42d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hostname.pdb

Imports

kernel32

GetLastError
SetThreadUILanguage
HeapSetInformation
Sleep
FormatMessageA
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__getmainargs
exit
_write
_setmode
puts

user32

CharToOemBuffA

ws2_32

gethostname
WSAStartup

mswsock

s_perror

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 192KB - Virtual size: 496KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0327a3b06807a2b22d59b9d0f00f42d7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

user32

ws2_32

mswsock

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 416B

.vmp0 Size: 192KB - Virtual size: 496KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 416B

.vmp0
Size: 192KB - Virtual size: 496KB