d6e899090ffa19e52d1c0537ca97cc1f_JaffaCakes118

General

Target

d6e899090ffa19e52d1c0537ca97cc1f_JaffaCakes118
Size

3.3MB
MD5

d6e899090ffa19e52d1c0537ca97cc1f
SHA1

74ec1eacf9eb8596e5f82e25eaf399c3d2b488bf
SHA256

0c0df4f4a4100e49b6190b211110ba8d4fbf9d0056fbe521ec7b337cd4dd9971
SHA512

5cf8fe38a78d7add1dfe6ff31ac8ba3b9b1daebed2a60ae8a59d4a5d68598b6dcaab908d0e8ef3986fe8229beb6aa055aac15475c7c2759a6ca312dc77733821
SSDEEP

24576:lPKduZ399VgRT5xgAtJfqNbafzA4YXp9zUKhqTkLlZ/STRDxB1EKD1DP:lPtRLUeAl4vUtkHShxBPxL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e899090ffa19e52d1c0537ca97cc1f_JaffaCakes118

Files

d6e899090ffa19e52d1c0537ca97cc1f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

979a5be57627278d048d9098c5115b46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
VirtualAllocEx
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
WideCharToMultiByte
HeapSize
HeapAlloc
GetStringTypeW

comctl32

ImageList_Copy
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_Destroy
ImageList_GetImageCount
ImageList_GetBkColor
ImageList_EndDrag
ImageList_DragLeave

shell32

SHGetSpecialFolderPathW
DragQueryFileW
SHBrowseForFolderW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.2MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

979a5be57627278d048d9098c5115b46

Headers

File Characteristics

Imports

kernel32

comctl32

shell32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 3.2MB - Virtual size: 9.3MB

.rsrc Size: 86KB - Virtual size: 86KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 3.2MB - Virtual size: 9.3MB

.rsrc
Size: 86KB - Virtual size: 86KB