d2188b5aec8d305e268d01f82ce7d6c2_JaffaCakes118

General

Target

d2188b5aec8d305e268d01f82ce7d6c2_JaffaCakes118
Size

285KB
MD5

d2188b5aec8d305e268d01f82ce7d6c2
SHA1

72da26ce3879d78e36adbb00bcb549e0cdf2abe8
SHA256

4ca3249c069b9825ee112eb750101da5ee3a52fab3c50b2b55f310d7d49ac01d
SHA512

f266fd457feff60f6cfcab386d979855d9c58a774ed028efdeb9cb4f4b50eb85164559ef86ad65665b2d9c9cd7e55c3f6159c4543087d46b1d682e483659c826
SSDEEP

6144:2FrXXRup34sB7VF4iE/XO3KxiYVS7GK5xxt8ZkBrVk6s36Gn+W:2NU4A7vG/ea8cSFxx60rVJs36G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2188b5aec8d305e268d01f82ce7d6c2_JaffaCakes118

Files

d2188b5aec8d305e268d01f82ce7d6c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62bb4a50aa2855d4ddae949894f8c644

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

lstrlenA
GetProcessHeap
GetWindowsDirectoryA
GlobalFindAtomW
HeapFree
LoadLibraryExW
ExpandEnvironmentStringsW
LoadLibraryW
FindClose
ReleaseMutex
GetPrivateProfileIntW
lstrcmpiW
GetModuleHandleW
LoadLibraryExA
CopyFileW
HeapAlloc
LocalFree
WritePrivateProfileStringW
GetSystemInfo
EnumResourceLanguagesA
GetPrivateProfileIntW
GetCurrentDirectoryW
FindNextFileW
GetCurrentProcessId
GetPrivateProfileStringW
FreeLibrary
WaitForSingleObject
CreateMutexW
SetFileAttributesW
GetModuleHandleA
GetSystemDirectoryW
FindFirstFileW
GetCurrentProcess

shlwapi

GetAcceptLanguagesA
UrlUnescapeW
PathFindExtensionW
PathIsRelativeW
StrCmpIW
PathRemoveFileSpecW
PathCreateFromUrlW
PathAppendW
UrlCreateFromPathW
PathCombineW

rpcrt4

UuidCreate

Sections

.text
Size: 142KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62bb4a50aa2855d4ddae949894f8c644

Headers

File Characteristics

Imports

shell32

kernel32

shlwapi

rpcrt4

Sections

.text Size: 142KB - Virtual size: 273KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 139KB - Virtual size: 139KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 273KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 139KB - Virtual size: 139KB

.rsrc
Size: 1024B - Virtual size: 4KB