49b0f8750e7c27363134c901e74293c5_JaffaCakes118

General

Target

49b0f8750e7c27363134c901e74293c5_JaffaCakes118
Size

286KB
MD5

49b0f8750e7c27363134c901e74293c5
SHA1

326fd357f24fe982d6a744f0414385559891540b
SHA256

00bdc3fc997519768f4e5ace965b337e494806c0cd03cd09eb73ad81501737c5
SHA512

db297f05a03a3ac476c0032e8b61bfc487a1239d758b016128a40f4fe22d9553a7780146b7602e32e6e9d4f3d4d79868127d616e20b043afdadbde6e804619d2
SSDEEP

6144:mnCCrLUwNcvmPSnBIvivyTz7JA1LQGtqro8THwCvLQOWV42WwqnW2aaOKj:QSXBIqvyTzYt+oG/ZS42NqnILKj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b0f8750e7c27363134c901e74293c5_JaffaCakes118

Files

49b0f8750e7c27363134c901e74293c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b94078e6c0e58d1f77e367b2a47c1320

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

rpcrt4

UuidCreate

kernel32

CopyFileW
LoadLibraryExW
FindClose
GetModuleHandleA
GlobalFindAtomW
GetSystemInfo
ReleaseMutex
LoadLibraryExA
GetWindowsDirectoryA
GetCurrentProcessId
FreeLibrary
HeapAlloc
LoadLibraryW
lstrlenA
lstrcmpiW
EnumResourceLanguagesA
SetFileAttributesW
HeapFree
GetSystemDirectoryW
GetPrivateProfileIntW
ExpandEnvironmentStringsW
LocalFree
GetCurrentDirectoryW
WaitForSingleObject
GetPrivateProfileIntW
FindFirstFileW
FindNextFileW
WritePrivateProfileStringW
GetProcessHeap
GetModuleHandleW
CreateMutexW
GetPrivateProfileStringW
GetCurrentProcess

shlwapi

GetAcceptLanguagesA
PathCreateFromUrlW
UrlCreateFromPathW
PathFindExtensionW
PathRemoveFileSpecW
UrlUnescapeW
StrCmpIW
PathIsRelativeW
PathAppendW
PathCombineW

Sections

.text
Size: 144KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b94078e6c0e58d1f77e367b2a47c1320

Headers

File Characteristics

Imports

shell32

rpcrt4

kernel32

shlwapi

Sections

.text Size: 144KB - Virtual size: 272KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 138KB - Virtual size: 137KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 272KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 138KB - Virtual size: 137KB

.rsrc
Size: 1024B - Virtual size: 4KB