868c36a3b8d115f0a22179f1ea47028d_JaffaCakes118

General

Target

868c36a3b8d115f0a22179f1ea47028d_JaffaCakes118
Size

288KB
MD5

868c36a3b8d115f0a22179f1ea47028d
SHA1

bae58e6005fd14f7eed020bc7e1de08a610c38d2
SHA256

85f2d49879c4a1a9961f60b9eeb5ff6e09aec670400074fa4e982895fcb66dc7
SHA512

a534ba4e403f7bcdf5be3b375f390fe0f165c96e38eef48b95754f4b7925c4d9c4402a65145edafe8be5e3011cf6d718bb382d8014fda92104956f33bf5ba3eb
SSDEEP

6144:POGSh8FLYkn/84yJB6qb7toJ6CZdAVqKH9pZ3aikP/wle1tCP:S8FLYknU407b+J6CZ2HlA44CP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
868c36a3b8d115f0a22179f1ea47028d_JaffaCakes118

Files

868c36a3b8d115f0a22179f1ea47028d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9332c55b47df7c66a54a42eaf3657260

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

shlwapi

StrRetToStrA
PathIsFileSpecA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathAppendA
PathCreateFromUrlW

oleacc

CreateStdAccessibleObject

kernel32

GlobalAlloc
GetCurrentProcess
lstrcmpW
GetModuleFileNameW
FindAtomW
CloseHandle
GetComputerNameW
GlobalUnlock
CreateFileW
GetTickCount
InterlockedDecrement
lstrlenW
GetSystemDirectoryW
MulDiv
WaitForSingleObject
ProcessIdToSessionId
WaitForMultipleObjects
InterlockedIncrement
EnumResourceLanguagesW
LocalAlloc
GetProcessId
FormatMessageW
EnterCriticalSection
InterlockedExchange
GlobalHandle
LeaveCriticalSection
GetStringTypeW
GlobalLock
CreateThread
HeapSetInformation
OpenProcess
RaiseException
InitializeCriticalSection
Sleep
GlobalFree
MultiByteToWideChar
lstrlenA
DeleteCriticalSection
GetLocaleInfoW
SetLastError
FlushInstructionCache
WideCharToMultiByte

Sections

.text
Size: 151KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9332c55b47df7c66a54a42eaf3657260

Headers

File Characteristics

Imports

shell32

shlwapi

oleacc

kernel32

Sections

.text Size: 151KB - Virtual size: 279KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 133KB - Virtual size: 132KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 151KB - Virtual size: 279KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 133KB - Virtual size: 132KB

.rsrc
Size: 512B - Virtual size: 4KB