17d86a765124c9cec2541155d8703828_JaffaCakes118

General

Target

17d86a765124c9cec2541155d8703828_JaffaCakes118
Size

80KB
MD5

17d86a765124c9cec2541155d8703828
SHA1

da80f16b2ddd3dc76d8b545f078552de8b5437cb
SHA256

cef77840baf1f2f5485f4ff1a864ce2fc8c20b70afe0c7f2da25535894f2f5ac
SHA512

0d7d0ef89dbcc0df532f6c01d9098c7ec8c62e12948890b1f59e1864915d810faf43a2804e3a9ee0143d61c45fb6b8e2c854121aaa9f8a2a9c5bece0e3dc8cbb
SSDEEP

1536:6fRc1XjylsPCoPbbOeW7zGIg+kLqZfvbf+Rs7pdoNWEQRc1usW:ORqXCsPbPb8nGIg+DdbfuMYNVTud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d86a765124c9cec2541155d8703828_JaffaCakes118

Files

17d86a765124c9cec2541155d8703828_JaffaCakes118
.exe windows:5 windows x86 arch:x86

70b18412ad9493ee88849f9dcaf75d65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
GetProcessHeap
InitializeCriticalSection
GetFileTime
GetBinaryType
GetDateFormatW
VirtualFree
LoadLibraryA
GetLongPathNameA
GetTimeZoneInformation
GetFileSize
AssignProcessToJobObject
AddAtomA
OpenProfileUserMapping
VirtualAlloc
GetFullPathNameA
GetModuleHandleA
ExitProcess
VirtualProtect
GetModuleHandleW
GetVolumePathNameA
GetLocaleInfoA
FileTimeToDosDateTime

msvcrt

_filelengthi64
abs
is_wctype
rename
memcpy
getenv
_mbsnextc
_initterm
_flushall
_wcsicoll

comdlg32

CommDlgExtendedError
dwOKSubclass
GetFileTitleW
GetFileTitleA
ReplaceTextW
GetOpenFileNameW
WantArrows
CommDlgExtendedError
GetSaveFileNameW
PrintDlgExW
GetFileTitleA

winmm

waveInPrepareHeader
mciGetDeviceIDFromElementIDW
waveOutUnprepareHeader
timeGetSystemTime
mmioDescend

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70b18412ad9493ee88849f9dcaf75d65

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

comdlg32

winmm

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 18KB - Virtual size: 17KB

.rsrc Size: 37KB - Virtual size: 37KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 18KB - Virtual size: 17KB

.rsrc
Size: 37KB - Virtual size: 37KB

.reloc
Size: 512B - Virtual size: 64B