eee9d71cb5b67d3de45b0e08f30ebc94_JaffaCakes118

General

Target

eee9d71cb5b67d3de45b0e08f30ebc94_JaffaCakes118
Size

287KB
MD5

eee9d71cb5b67d3de45b0e08f30ebc94
SHA1

096aa85eee5ca5594e9b860d3b75e42e6f070e25
SHA256

b1f7334583a539325f6924375866a57c7c38e4d4bb5c05a006e79417878336a3
SHA512

0802b832c04dcd643df187d4b6c4b47f38419608b09bd66eff87e7ed3dc3a936b954a4b66ab341b2f668e41f24161ae5728b5cde5dc84eb50ad57e035694d39c
SSDEEP

6144:BXQ/QGnG9/CWXlyJMyi8lRXkM3HdpCdrhmKEZEwHojcR0NaXcWPdBl:BMGBr1AbxHdkd1fMEaypWP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee9d71cb5b67d3de45b0e08f30ebc94_JaffaCakes118

Files

eee9d71cb5b67d3de45b0e08f30ebc94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca12445637dcb2d692135990da2a1bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

GetPrivateProfileStringW
FindNextFileW
CreateMutexW
WaitForSingleObject
GetProcAddress
FindAtomW
GetSystemDirectoryW
GetPrivateProfileIntW
LoadLibraryW
CopyFileW
HeapFree
ExpandEnvironmentStringsW
lstrcmpiW
FreeLibrary
ReleaseMutex
HeapAlloc
SetFileAttributesW
WritePrivateProfileStringW
EnumResourceLanguagesW
GetSystemInfo
GetCurrentProcessId
LocalFree
GetModuleHandleA
FindFirstFileW
lstrlenA
GetConsoleCursorMode
LoadLibraryExA
FindClose
GetCurrentDirectoryW
LoadLibraryExW
GetProcessHeap
GetWindowsDirectoryA
GetModuleHandleW
GetCurrentProcess

shlwapi

GetAcceptLanguagesW
PathIsRelativeW
UrlCreateFromPathW
PathCreateFromUrlW
StrCmpIW
PathFindExtensionW
UrlUnescapeW
PathAppendW
PathRemoveFileSpecW
PathCombineW

rpcrt4

UuidCreate

Sections

.text
Size: 146KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca12445637dcb2d692135990da2a1bf4

Headers

File Characteristics

Imports

shell32

kernel32

shlwapi

rpcrt4

Sections

.text Size: 146KB - Virtual size: 273KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 137KB - Virtual size: 137KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 146KB - Virtual size: 273KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 137KB - Virtual size: 137KB

.rsrc
Size: 1024B - Virtual size: 4KB