3e6ad1448fa68146c0497ec12ed59d06_JaffaCakes118

General

Target

3e6ad1448fa68146c0497ec12ed59d06_JaffaCakes118
Size

131KB
MD5

3e6ad1448fa68146c0497ec12ed59d06
SHA1

1f2a5a9954005d10d7f0777778578596763b8a51
SHA256

c0bae10bcb379a1f6e3f1375f566b79f548a4cf844e88ba9674dcddb42252d43
SHA512

08256d1bc752b4dcb02874a59e30b86c2495ddb7ef1444d2d40a63de7b0ebbb32ac99c6e2dc1d9ece626f5de398b83f16095829986e5e320671b2398e5a5e881
SSDEEP

3072:UB8DQQKCZ2xdxtUeG6qG3s+n3YZrItiZlB5YMc205:RMQt6M57GTn6UiZlB5rFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e6ad1448fa68146c0497ec12ed59d06_JaffaCakes118

Files

3e6ad1448fa68146c0497ec12ed59d06_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bc9b566bdfe48200fc8607680fbbe158

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW
ShellExecuteW

kernel32

HeapFree
SetLastError
CopyFileW
lstrcmpiW
GetShortPathNameW
GlobalAlloc
Sleep
FindFirstFileW
MulDiv
CreateProcessW
FindClose
GetUserDefaultLCID
GetFullPathNameW
CloseHandle
ResetEvent
GetVersionExW
WideCharToMultiByte
GetProcessHeap
FindNextFileW
WaitForSingleObject
HeapReAlloc
CreateEventW
GetFileAttributesW
GlobalFree
HeapAlloc
lstrlenA
GetFileAttributesA
VirtualAlloc

user32

TrackPopupMenu
GetMenuCheckMarkDimensions
GetCapture
SetScrollRange
GetMessageTime
LoadImageW
CharUpperW
FillRect
GetSysColorBrush
MoveWindow
GetPropW
PeekMessageW
GetLastActivePopup
LoadMenuW
ModifyMenuW

comdlg32

GetOpenFileNameA
PrintDlgA

rpcrt4

RpcBindingFree
RpcRevertToSelf
RpcBindingFromStringBindingW
UuidCreate

ws2_32

WSAGetLastError

crypt32

CryptSignAndEncryptMessage

msvcrt

__doserrno

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bc9b566bdfe48200fc8607680fbbe158

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

user32

comdlg32

rpcrt4

ws2_32

crypt32

msvcrt

Sections

.text Size: 66KB - Virtual size: 66KB

.rsrc Size: 41KB - Virtual size: 40KB

.data Size: 18KB - Virtual size: 224KB

.rdata Size: 4KB - Virtual size: 3KB

.text
Size: 66KB - Virtual size: 66KB

.rsrc
Size: 41KB - Virtual size: 40KB

.data
Size: 18KB - Virtual size: 224KB

.rdata
Size: 4KB - Virtual size: 3KB