fed68b4f3a35d6fc2d8b7a93dd95803f_JaffaCakes118

General

Target

fed68b4f3a35d6fc2d8b7a93dd95803f_JaffaCakes118
Size

188KB
MD5

fed68b4f3a35d6fc2d8b7a93dd95803f
SHA1

126a0f8def74ba9cfbc349d9e61fec7a61d1b665
SHA256

3f6880995647e42e3de338e220b8266b3c1be61edfe475aae0cc43f386eeeb27
SHA512

a754c0a9251702d3635f3c6c6fceddf70ef7fa1ea55f17da9f6e9c892d86bc2d3498dca791439fdfa00a7f5d48379b4eaa0d5002ebd597572f7e4c985e4838e9
SSDEEP

3072:kXuwla222NYPmwJ0xa3wXVz7XmTzAxwsuH8mH0UpuYa5bNImw:Hwla229tJ00gj/xwRcmHZuYPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fed68b4f3a35d6fc2d8b7a93dd95803f_JaffaCakes118

Files

fed68b4f3a35d6fc2d8b7a93dd95803f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a9b47f44ddcc4af5fecc8dffd2d3c18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

oleacc

CreateStdAccessibleObject

shlwapi

StrRetToStrA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathIsFileSpecA
PathCreateFromUrlW

kernel32

TlsAlloc
FindAtomW
GetComputerNameW
GetCurrentProcess
EnterCriticalSection
InterlockedDecrement
FormatMessageW
GetLocaleInfoW
CreateFileW
InitializeCriticalSection
GlobalHandle
HeapSetInformation
DeleteCriticalSection
GlobalAlloc
InterlockedExchange
CloseHandle
WaitForSingleObject
LeaveCriticalSection
TlsFree
GlobalFree
lstrlenW
EnumResourceNamesA
SetUnhandledExceptionFilter
GetOEMCP
GlobalUnlock
TlsGetValue
MultiByteToWideChar
GetTickCount
lstrlenA
MulDiv
RaiseException
SetLastError
GetStringTypeA
TlsSetValue
SetLastError
FlushInstructionCache
GlobalLock
LocalAlloc
InterlockedIncrement
lstrcmpW
GetCurrentThreadId
WideCharToMultiByte

Sections

.text
Size: 94KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a9b47f44ddcc4af5fecc8dffd2d3c18

Headers

File Characteristics

Imports

shell32

oleacc

shlwapi

kernel32

Sections

.text Size: 94KB - Virtual size: 234KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 90KB - Virtual size: 90KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 94KB - Virtual size: 234KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 90KB - Virtual size: 90KB

.rsrc
Size: 512B - Virtual size: 4KB