f669bf97bbb20e247dc14d0ab1cd70db_JaffaCakes118

General

Target

f669bf97bbb20e247dc14d0ab1cd70db_JaffaCakes118
Size

181KB
MD5

f669bf97bbb20e247dc14d0ab1cd70db
SHA1

2655ce098830f7164d015fa72011be864591e2a5
SHA256

574697f18ae5b58b6fdab88b676d41fa415a0ed36db2c319e0283c2928e0d098
SHA512

e17e6090741fdf6f1881d126f1891fc6b230b3acec3c811c7c7e43e44a4203dfec1de3d7a09458478a3710f22be8caf72c52cc3b2ce55a7f86f19c9475061b62
SSDEEP

3072:dUtQyKRgAHI0FqjS4uSPe7KIUf62ZJGIn6EbL1uFk32UAEzvlbwz6iRRJ+LI:KKmAkm+InO/IlUnRwOiR2I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f669bf97bbb20e247dc14d0ab1cd70db_JaffaCakes118

Files

f669bf97bbb20e247dc14d0ab1cd70db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5e37367c04e7b8b89b253d1245baf1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

rpcrt4

NdrComplexArrayFree
UuidCreate

ole32

OleUninitialize
CoCreateInstance
OleInitialize
CoTaskMemFree

advapi32

RegEnumValueA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

kernel32

FlushInstructionCache
WriteFile
FindFirstFileA
SetFilePointer
GetModuleHandleA
DeleteFileA
MulDiv
WaitForSingleObject
FindNextFileA
GetProcAddress
GetWindowsDirectoryA
ReadFile
FreeLibrary
EnumResourceNamesW
GetPrivateProfileStringA
GetExitCodeProcess
LoadLibraryExA
SetupComm
MultiByteToWideChar
GlobalAlloc
FindClose
WritePrivateProfileStringA
GlobalFree

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked

shell32

SHGetSpecialFolderLocation
SHBrowseForFolderA
ShellExecuteA
SHGetFileInfoA
SHFileOperationA
SHGetPathFromIDListA

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5e37367c04e7b8b89b253d1245baf1f

Headers

File Characteristics

Imports

version

rpcrt4

ole32

advapi32

kernel32

comctl32

shell32

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 72KB - Virtual size: 71KB

.reloc Size: 1024B - Virtual size: 260KB

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 72KB - Virtual size: 71KB

.reloc
Size: 1024B - Virtual size: 260KB