46e3ee8b33e565f29e9cb6b7571b0eb9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

46e3ee8b33e565f29e9cb6b7571b0eb9_JaffaCakes118
Size

89KB
MD5

46e3ee8b33e565f29e9cb6b7571b0eb9
SHA1

c431beb4c7eab4c3147d6f938ed5bbbb2bd7d623
SHA256

6cc7e46d68cf6dcf5e02ebb506cb6cb4ed38316cc93e3a16e3c9f577a1dbd673
SHA512

ac43917158b7f9fb467da806bd891ff722cbff59b8571ad332f01d05e465245e6b225afca5f11ef87554940154b1adfd0523bba7ca83f899db69347beb57e2bc
SSDEEP

1536:dlzpFKoRIX9eHzNIcSYmqimucrByLTaYT:B8oqMTkuucrAVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46e3ee8b33e565f29e9cb6b7571b0eb9_JaffaCakes118

Files

46e3ee8b33e565f29e9cb6b7571b0eb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9fd9618f3fc63782e5a0238ba492828

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
StrRChrA
StrCmpNIA
SHSetValueA
PathIsContentTypeA
StrChrA
StrStrA
SHEnumValueA

comdlg32

GetOpenFileNameA

msvcrt

exit
memcpy
_chsize
_snprintf
_commit
malloc
_XcptFilter
atol

kernel32

GlobalFindAtomA
lstrlenA
FormatMessageA
GetStdHandle
EnterCriticalSection
CloseHandle
GetLocalTime
CreateFileA
GetDiskFreeSpaceA
ExitProcess
CreateThread
GetCommandLineA
HeapAlloc
GetCurrentProcess
GetProcAddress
LocalFree
GetCurrentThreadId
InitializeCriticalSection
LoadLibraryExA
GetStartupInfoA
GetVersionExA
GetCurrentProcessId
WriteFile
GetTickCount
GlobalAlloc
VirtualQuery
SizeofResource
GetCurrentThread
lstrcmpiA
SetFilePointer
SetThreadLocale
GetFileSize
VirtualAlloc
MoveFileExA
GetStringTypeA

user32

FrameRect
EnumChildWindows
EndPaint
GetFocus
DrawEdge
IsWindowVisible
DrawIconEx
GetClassInfoA
ClientToScreen
CheckMenuItem
GetScrollInfo
MessageBoxA
GetCursor
GetPropA
IsWindowEnabled
EnumWindows
GetSubMenu
GetDC
IsChild
GetMenuItemInfoA
GetCursorPos

Sections

CODE
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 65KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.init
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9fd9618f3fc63782e5a0238ba492828

Headers

File Characteristics

Imports

shlwapi

comdlg32

msvcrt

kernel32

user32

Sections

CODE Size: 9KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 5KB

.edata Size: 65KB - Virtual size: 73KB

.init Size: 7KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 571B

CODE
Size: 9KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 5KB

.edata
Size: 65KB - Virtual size: 73KB

.init
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 571B