3a45d4bfd1f919f167ce4a5e5ba00e15_JaffaCakes118

General

Target

3a45d4bfd1f919f167ce4a5e5ba00e15_JaffaCakes118
Size

121KB
MD5

3a45d4bfd1f919f167ce4a5e5ba00e15
SHA1

de393bc32b6d0b847d4bf49c1ed6478ee9029f90
SHA256

6ad91e399eca4253b5871954aa23cf63b6ea2338a9e5c57e18cead0ab4b485c1
SHA512

07fd91ff34701ba48b78ebdf1ba6f470b94770b258b1c36edf808246145b9a212d6bac5f58751ac1096892c850b2fceaa2f3d3a061c66ee3856538eec51b64a9
SSDEEP

3072:QnTgU6ZbZnadtpiRJpLLNkKYz54FlkYkARyQqY:2gNZbRaQLaK84FlkYnytY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a45d4bfd1f919f167ce4a5e5ba00e15_JaffaCakes118

Files

3a45d4bfd1f919f167ce4a5e5ba00e15_JaffaCakes118
.exe .pdf windows:4 windows x86 arch:x86 polyglot

51fa801d0a175c62e8360f7d2b97117a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetTickCount
CreateDirectoryA
ExpandEnvironmentStringsA
WaitForSingleObject
GetStartupInfoA
SetCurrentDirectoryA
FreeResource
WriteFile
ExitProcess
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
ReadFile
MultiByteToWideChar
lstrcpyA
IsDebuggerPresent
GetModuleFileNameA
WinExec
DeleteFileA
Sleep
CloseHandle
LoadLibraryA
GetProcAddress
CreateFileA
GetLastError

advapi32

RegCloseKey
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptDecrypt
RegQueryValueExA

shell32

ShellExecuteA

lz32

LZOpenFileA
LZClose
LZCopy

msvcrt

strcmp
free
fclose
fwrite
fread
malloc
fopen
memcpy
strlen
_beginthreadex
strcpy
strstr
memset
ftell
fseek
strcat
sprintf
printf
strrchr
__p__pgmptr
_controlfp
strncmp
memmove
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51fa801d0a175c62e8360f7d2b97117a

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

lz32

msvcrt

ole32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 107KB - Virtual size: 106KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 107KB - Virtual size: 106KB