JaffaCakes118_78063e353ceaf38dd905b4d164c3fd80

General

Target

JaffaCakes118_78063e353ceaf38dd905b4d164c3fd80
Size

131KB
MD5

78063e353ceaf38dd905b4d164c3fd80
SHA1

c1cb4f5bbc95f6cc4604fe00aabecc3f41690ca1
SHA256

3e34d66acf4c8911e5bd24ff1398cb53c5dd514744e98c3392bcaea28f713117
SHA512

ff24a50fb370e81e4c5376a19200a11c27ca7dbb7bf840a8cef78de9c87bd8b0ef990307d9993454d6989049eb2bd7bcd10f661bdb2e9759acf1cb841b43f25a
SSDEEP

3072:kinktgRYiecPOdjDKCo3qEK8e2atUfFzf85u4CCZH:XnktpDKCo3qELfd2u4CC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_78063e353ceaf38dd905b4d164c3fd80

Files

JaffaCakes118_78063e353ceaf38dd905b4d164c3fd80
.exe windows:5 windows x86 arch:x86

b3101d50a4be128495b5843b59460e53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindVolumeClose
GetVersionExA
GlobalFlags
GetDriveTypeA
GetStringTypeA
CreateDirectoryW
RemoveDirectoryA
CloseHandle
GetPrivateProfileIntA
GetCurrentThread
DeviceIoControl
LoadLibraryA
HeapFree
GetFileAttributesW
GlobalLock
GetCurrentProcess
GetStdHandle
CreateEventA
GetFileAttributesW
VirtualProtectEx
GetPrivateProfileSectionA

shell32

DllUnregisterServer
ExtractIconA
DragAcceptFiles
DragFinish
SHFree
DllUnregisterServer
SHGetSettings
StrChrA
DuplicateIcon
ShellAboutA
ShellMessageBoxA
DragQueryFileA
SHGetMalloc

ntmarta

AccConvertSDToAccess
AccFreeIndexArray
AccConvertAclToAccess
AccGetExplicitEntries

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3101d50a4be128495b5843b59460e53

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 508B

.rsrc Size: 121KB - Virtual size: 121KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 508B

.rsrc
Size: 121KB - Virtual size: 121KB

.import
Size: 512B - Virtual size: 372B