68953e44d912b87dfd68679baf4f8da1_JaffaCakes118

General

Target

68953e44d912b87dfd68679baf4f8da1_JaffaCakes118
Size

285KB
MD5

68953e44d912b87dfd68679baf4f8da1
SHA1

22788ba05417e804083b581138aaac4cd57bc743
SHA256

b3ab7e6f21484f88e469d9bddc8dd65c3f4b1ec2bca12d346bd9aa7af8721c1d
SHA512

64c6c79a73a6795df5d79335cdc36cd8d7df97f6914d55921c0f44e6243599e2cc2e5be417712d6861e3176752761781cc088b444a77ba132d4d88b866489ce8
SSDEEP

6144:2FrkXRup34sB7VF4iE/XO3KxiYVS7GK5xxt8ZkBrVk6s36Gn+W:2Np4A7vG/ea8cSFxx60rVJs36G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68953e44d912b87dfd68679baf4f8da1_JaffaCakes118

Files

68953e44d912b87dfd68679baf4f8da1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62bb4a50aa2855d4ddae949894f8c644

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

lstrlenA
GetProcessHeap
GetWindowsDirectoryA
GlobalFindAtomW
HeapFree
LoadLibraryExW
ExpandEnvironmentStringsW
LoadLibraryW
FindClose
ReleaseMutex
GetPrivateProfileIntW
lstrcmpiW
GetModuleHandleW
LoadLibraryExA
CopyFileW
HeapAlloc
LocalFree
WritePrivateProfileStringW
GetSystemInfo
EnumResourceLanguagesA
GetPrivateProfileIntW
GetCurrentDirectoryW
FindNextFileW
GetCurrentProcessId
GetPrivateProfileStringW
FreeLibrary
WaitForSingleObject
CreateMutexW
SetFileAttributesW
GetModuleHandleA
GetSystemDirectoryW
FindFirstFileW
GetCurrentProcess

shlwapi

GetAcceptLanguagesA
UrlUnescapeW
PathFindExtensionW
PathIsRelativeW
StrCmpIW
PathRemoveFileSpecW
PathCreateFromUrlW
PathAppendW
UrlCreateFromPathW
PathCombineW

rpcrt4

UuidCreate

Sections

.text
Size: 142KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62bb4a50aa2855d4ddae949894f8c644

Headers

File Characteristics

Imports

shell32

kernel32

shlwapi

rpcrt4

Sections

.text Size: 142KB - Virtual size: 273KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 139KB - Virtual size: 139KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 273KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 139KB - Virtual size: 139KB

.rsrc
Size: 1024B - Virtual size: 4KB