3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118

General

Target

3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118
Size

179KB
MD5

3ca6b8dfdcc8ed3be11e97a4d4b91307
SHA1

ee4dc48655fa2f2a93e55c95c43bd2c287359164
SHA256

43e28c125a63571f9ef25873b07c1746166e0404f386dce462cfc2b8b27f6551
SHA512

937eac19ba251a4a98f38e8f7398cdfeeb6cdc8720e3a081a78a8d0780ddf24c85fc8708828858d0ba3cb6b5e8e6a15d198618a6a484e336711395c2ee140300
SSDEEP

3072:ZOl+3KP6cwD4csJOTfWq9wCA/NcYJwR94tLxEElKFZxuoSbn1ziguuYT:L3bVD+4WqOCAIy5xHL1zLu/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118

Files

3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5dbc961fd25b03cbdbaad72536691bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GlobalGetAtomNameA
GetPrivateProfileStringW
GlobalAlloc
FreeLibrary
Sleep
GetProcAddress
GetVersionExA
GetVersionExW
WritePrivateProfileStringW
MultiByteToWideChar
GlobalUnlock
GetModuleHandleW
LockResource
CloseHandle
DeleteCriticalSection
FindResourceW
FindNextChangeNotification
EnumResourceTypesW
GlobalLock
LoadLibraryW
GetPrivateProfileIntW
lstrlenW
FindClose
GetCurrentDirectoryW
FindFirstFileW
FindFirstChangeNotificationW
IsBadCodePtr
GetTickCount
InitializeCriticalSection
LoadResource
FindCloseChangeNotification
MulDiv
GetModuleFileNameW
LoadLibraryA
GlobalSize
GetLocaleInfoW

wininet

InternetOpenA
HttpOpenRequestA
InternetErrorDlg
InternetReadFile
InternetCrackUrlA
HttpSendRequestA
InternetConnectA
HttpQueryInfoA
InternetTimeToSystemTime
InternetCloseHandle
InternetTimeFromSystemTime

shell32

SHGetImageList
ShellExecuteExW
ShellExecuteExA
SHGetFolderPathW
SHGetFileInfoA
SHGetPathFromIDListA
ShellExecuteW
CommandLineToArgvW
SHBrowseForFolderA
SHFileOperationW
Shell_NotifyIconA

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5dbc961fd25b03cbdbaad72536691bc

Headers

File Characteristics

Imports

kernel32

wininet

shell32

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 2KB - Virtual size: 145KB

.data Size: 98KB - Virtual size: 98KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 2KB - Virtual size: 145KB

.data
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 512B - Virtual size: 4KB