d6a1a7bb4fad0308ce15236e51161957_JaffaCakes118

General

Target

d6a1a7bb4fad0308ce15236e51161957_JaffaCakes118
Size

178KB
MD5

d6a1a7bb4fad0308ce15236e51161957
SHA1

71cc14bdffe81d069c17ce83b72988836beccc51
SHA256

f84109dc237e5c9ae25c275aaadc434ca36dad1c98531fff956461ce7b189d81
SHA512

18dd85d25297514b81c7ae5f25e342ffe2dc86e3c57b4231a5b186c2dda32c526b0b3a6a2f18ae8f87d4aa5d7a8558aa2a358d1bab94c9909b1f1324f6a917de
SSDEEP

3072:BL1J4g+mJmHiAQ/gO6kzR1zvT//C+kh6ZiqPDrRul6e42Ei:vnAQ/ieRBOd6Zi2DNule2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a1a7bb4fad0308ce15236e51161957_JaffaCakes118

Files

d6a1a7bb4fad0308ce15236e51161957_JaffaCakes118
.exe windows:6 windows x86 arch:x86

e0374cf135f6e0fbe93c7732d87dc193

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

shlwapi

StrRetToStrA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathAppendA
PathCreateFromUrlW

oleacc

CreateStdAccessibleObject

kernel32

RaiseException
GlobalFree
InterlockedExchange
FlushInstructionCache
WaitForSingleObject
FindAtomW
InitializeCriticalSection
LocalAlloc
LeaveCriticalSection
TlsAlloc
TlsFree
EnterCriticalSection
lstrcmpW
CreateFileW
InterlockedDecrement
TlsSetValue
GlobalLock
GetCurrentThreadId
GlobalUnlock
TlsGetValue
GetLocaleInfoW
FormatMessageW
HeapSetInformation
EnumResourceNamesA
MultiByteToWideChar
SetLastError
GetOEMCP
CloseHandle
GetStringTypeA
SetLastError
GetCurrentProcess
GetTickCount
lstrlenA
InterlockedIncrement
SetUnhandledExceptionFilter
GetComputerNameW
MulDiv
GlobalHandle
GlobalAlloc
DeleteCriticalSection
lstrlenW
WideCharToMultiByte

Sections

.text
Size: 92KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0374cf135f6e0fbe93c7732d87dc193

Headers

File Characteristics

Imports

shell32

shlwapi

oleacc

kernel32

Sections

.text Size: 92KB - Virtual size: 484KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 77KB - Virtual size: 77KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 92KB - Virtual size: 484KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 77KB - Virtual size: 77KB

.rsrc
Size: 6KB - Virtual size: 5KB