e1b518bf47b139e7bb023f0f2815449a_JaffaCakes118

General

Target

e1b518bf47b139e7bb023f0f2815449a_JaffaCakes118
Size

15KB
MD5

e1b518bf47b139e7bb023f0f2815449a
SHA1

e27fbe3ba5cb9a4e5ab4d5ec3c7b2fb9eef7cf4a
SHA256

a6db52f919178da3ba842abef1f624b159fd08b45e4b3662f13f4b07f87f5b61
SHA512

1e7faae4f6534ac2d72bb6ae94ec474d078a56d6f6d86d24c8fe5391a53a41aea5b3e7bd6e25a039af891a6ccaceb92d689c0e5a5a9de3c86304567626061b61
SSDEEP

384:Ltd3kakNTlUBaR4jE37L6NcM7gM4A3VIB8k:n3kaWaA4o3ayMKA3VIB8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1b518bf47b139e7bb023f0f2815449a_JaffaCakes118

Files

e1b518bf47b139e7bb023f0f2815449a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9cdc7718a406d802cad981b764bec985

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualAllocEx
GetSystemTime
GetStringTypeExA
ConnectNamedPipe
SetFilePointer
GetCurrentThreadId
OpenMutexA
GetVersion
GetNamedPipeHandleStateA
ReadFile
ReleaseMutex
IsBadStringPtrA
GetStringTypeA
GetLastError
DosDateTimeToFileTime
GetSystemTimeAdjustment
CreateMutexA
CloseHandle
GetProcessHeap
CreateMailslotA
SetNamedPipeHandleState
CreateFileA

user32

DefWindowProcA
CreateDialogParamA
DialogBoxParamA
ChildWindowFromPoint
RegisterClassExA
GetSysColor
SystemParametersInfoA
SendMessageA
UpdateWindow
CreateWindowExA
PostQuitMessage
EnableWindow
GetDlgItem
WinHelpA
GetWindowTextA
GetMessageA
TranslateMessage
DrawTextA
DestroyWindow
OffsetRect
SetDlgItemTextA
SetWindowPos
DispatchMessageA
ShowWindow

shell32

ILGetNext
SHGetDesktopFolder
SHChangeNotifyRegister
SHGetInstanceExplorer
DAD_DragLeave
SHUpdateRecycleBinIcon
Shell_NotifyIcon
ILGetSize
ShellExecuteExA
SHCreateDirectoryExA
SHLoadInProc
Shell_NotifyIconA
DllInstall
ILFree
Shell_GetCachedImageIndex
PathResolve
SHCreateStdEnumFmtEtc
GetFileNameFromBrowse
SHGetImageList
SHLimitInputEdit
SHIsFileAvailableOffline
SHCreateShellFolderViewEx
DAD_AutoScroll
SHBrowseForFolder
SHGetPathFromIDListA
DriveType
SHFormatDrive
SHGetDiskFreeSpaceExA
SHILCreateFromPath
SHPropStgCreate
IsNetDrive
PifMgr_SetProperties
SHAddFromPropSheetExtArray
SHGetIconOverlayIndexA
SHSetLocalizedName
ShellHookProc
ILCreateFromPathA
DllGetClassObject
ExtractIconEx

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cdc7718a406d802cad981b764bec985

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 36KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 36KB