474e146922b8df4c3f5038bcf1a34b1a_JaffaCakes118

General

Target

474e146922b8df4c3f5038bcf1a34b1a_JaffaCakes118
Size

189KB
MD5

474e146922b8df4c3f5038bcf1a34b1a
SHA1

b02d35ebfce1a5dafa68db396113090de228f843
SHA256

4ac262c44085af2e001f4c16d80dfa6bc9b7437c19044748304014b4ce4c25d0
SHA512

62e78a10b708900c8aad13d4657e8e5a8b2b5f2843b08c626a6538952094774d23fa8c4563ebf89db039ab802a154cc7779e42b7e5cd7b60c2948d0e9cc5e2cb
SSDEEP

3072:O23rRquoIPr1n925uyaJKRfUXdHtnxvfgYu4VndJR0OAl8cP1/D8ZphO+K:zVqu5Px925uPkRfUXdHtnOt4VndBo8Ai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
474e146922b8df4c3f5038bcf1a34b1a_JaffaCakes118

Files

474e146922b8df4c3f5038bcf1a34b1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03adea27d04fe2d483cb11dffcb8e781

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

rpcrt4

RpcStringFreeA

shlwapi

StrRetToStrA
PathIsFileSpecA
SHCreateStreamOnFileEx
PathAppendA
PathIsContentTypeA
PathCreateFromUrlW

kernel32

GetComputerNameW
TlsAlloc
FindAtomA
GlobalFree
InterlockedExchange
EnterCriticalSection
CreateFileW
GetCurrentProcess
RaiseException
MulDiv
GlobalHandle
GlobalUnlock
LocalAlloc
HeapSetInformation
SetLastError
CloseHandle
lstrlenW
FlushInstructionCache
lstrcmpW
GlobalLock
GetTickCount
TlsGetValue
EnumResourceNamesA
GetOEMCP
MultiByteToWideChar
InterlockedDecrement
lstrlenA
SetLastError
TlsFree
GetLocaleInfoW
TlsSetValue
GetStringTypeA
FormatMessageW
GetCurrentThreadId
WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedIncrement
SetUnhandledExceptionFilter
GlobalAlloc
WideCharToMultiByte

Sections

.text
Size: 102KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03adea27d04fe2d483cb11dffcb8e781

Headers

File Characteristics

Imports

shell32

rpcrt4

shlwapi

kernel32

Sections

.text Size: 102KB - Virtual size: 242KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 84KB - Virtual size: 83KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 102KB - Virtual size: 242KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 84KB - Virtual size: 83KB

.rsrc
Size: 512B - Virtual size: 4KB