d3a6e3486f224ca0086f2321be556902_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d3a6e3486f224ca0086f2321be556902_JaffaCakes118
Size

17KB
MD5

d3a6e3486f224ca0086f2321be556902
SHA1

c989c2c0199443f9cfc66236eca41a8256f77916
SHA256

1b4bca2ea1405ba6857b4239041e4bba05cfcd05a2bffe051b98a4b2ddabb97c
SHA512

ae19743b9cbd9cf33211e70fab74db0010aed53aec250d2a4fe50d2c02975e5bbeeae4f26d21bad38e4154f8f03793fe57a6ff80baa17bd8f621973b3485924d
SSDEEP

192:O544g7hMTz+V1719Gbn2jWus/j+VzC6yGAprZAH0xEc:M4/7Mqx9GbKW7aslGAcH0l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3a6e3486f224ca0086f2321be556902_JaffaCakes118

Files

d3a6e3486f224ca0086f2321be556902_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetDateFormatA
GlobalAddAtomW
InterlockedDecrement
GetProcessVersion
DeviceIoControl
GetProcAddress
lstrcmpW
FormatMessageW
GetPrivateProfileIntW
GetFileAttributesW
WideCharToMultiByte
LocalLock
InterlockedIncrement
CreateDirectoryW
HeapFree
CreateFileW
SetLastError
GetTempPathW
WriteFile
SetFilePointer
GetTimeFormatW
DuplicateHandle
CloseHandle
CopyFileW
GetCurrentThreadId
DeleteFileW
GetCurrentProcessId
GetPrivateProfileSectionW
GetModuleHandleA
GetWindowsDirectoryW
GetFileSize
lstrcmpiW
ReadFile
DnsHostnameToComputerNameA
IsWow64Process
GetFullPathNameW
GlobalWire
GetExitCodeProcess
lstrlenA
BackupRead
GetTempPathA
GetProcessHeap
FreeLibrary
GetSystemDirectoryW
IsValidLocale
LocalAlloc
GetVolumeInformationW
SetThreadPriority
GlobalFree
GetThreadLocale
CreateFileA
IsBadCodePtr
SwitchToThread
lstrlenW
GetTickCount
GetFileTime
HeapAlloc
GetDateFormatW
RaiseException
SetCurrentDirectoryW
GetCurrentProcess
RemoveDirectoryA
WaitNamedPipeW
GetCommandLineW
LocalReAlloc
ReleaseMutex
GetStartupInfoA
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
GlobalAlloc
QueryPerformanceCounter
MultiByteToWideChar
GetLogicalDriveStringsW
GetPrivateProfileStringW
LocalFree
CreateMutexW

gdi32

GetStockObject

user32

GetWindowDC
IsRectEmpty
GetWindowInfo
SetFocus

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked

shell32

SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rxdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 139KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

Imports

kernel32

gdi32

user32

comctl32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 117KB

.rxdata Size: 5KB - Virtual size: 5KB

.pdata Size: 139KB - Virtual size: 243KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 117KB

.rxdata
Size: 5KB - Virtual size: 5KB

.pdata
Size: 139KB - Virtual size: 243KB