f7a4201801363bad6bf0be472e301784_JaffaCakes118

General

Target

f7a4201801363bad6bf0be472e301784_JaffaCakes118
Size

188KB
MD5

f7a4201801363bad6bf0be472e301784
SHA1

a8738aefbd86992676b2a1d239c267b862a67cc9
SHA256

5b5392a0cc3c1f193a8b4a7a1c7d7da34ab29735da8c19b192cd6c0056aea2ae
SHA512

085715310b149429dcda96cae373ca12bc62bcb1c82c431f313830bdce2944414725aec20d90a90c3ab94e18e3c56f8c487296644f249806d5062d5bd2da3ca6
SSDEEP

3072:4bX3fKGlGiPqEWMHo/qaT/OgEe130MTfPOlYKCJqdcXGJQow5MZJ9xQRg3se7L14:EX3fVEiPqsHhaT/330MY2MQgZUg3sy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7a4201801363bad6bf0be472e301784_JaffaCakes118

Files

f7a4201801363bad6bf0be472e301784_JaffaCakes118
.exe windows:4 windows x86 arch:x86

529287ddb05145bbea8de29cd3726e2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

DeleteCriticalSection
SetUnhandledExceptionFilter
GlobalAlloc
FindAtomW
GetComputerNameW
MulDiv
TlsSetValue
InterlockedDecrement
GetLocaleInfoW
CloseHandle
MultiByteToWideChar
InitializeCriticalSection
lstrlenW
WaitForSingleObject
InterlockedExchange
SetLastError
InterlockedIncrement
GlobalUnlock
GetOEMCP
lstrlenA
TlsGetValue
LocalAlloc
SetLastError
EnumResourceNamesA
GlobalFree
GlobalLock
FormatMessageW
CreateFileW
GlobalHandle
TlsFree
lstrcmpW
TlsAlloc
RaiseException
GetStringTypeA
GetTickCount
HeapSetInformation
GetCurrentThreadId
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
WideCharToMultiByte

oleacc

CreateStdAccessibleObject

shlwapi

StrRetToStrA
PathAppendA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathCreateFromUrlW

Sections

.text
Size: 94KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

529287ddb05145bbea8de29cd3726e2d

Headers

File Characteristics

Imports

shell32

kernel32

oleacc

shlwapi

Sections

.text Size: 94KB - Virtual size: 234KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 90KB - Virtual size: 90KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 94KB - Virtual size: 234KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 90KB - Virtual size: 90KB

.rsrc
Size: 512B - Virtual size: 4KB