ad172fb916775159d6a596b9af5c8fe6_JaffaCakes118

General

Target

ad172fb916775159d6a596b9af5c8fe6_JaffaCakes118
Size

222KB
MD5

ad172fb916775159d6a596b9af5c8fe6
SHA1

ee020e3d5c8905d373b45da88e38c1e2ff1daade
SHA256

d5174ac89b10a7de676d3024b6a33ecf1786691a73ad967f4f1d5d128b223a00
SHA512

54e0640d1d1a717a41053d589745f86d2b8d18e6b69af548e31d549af6d5ad6b38127233c447e872149431fe24bd430dd35d387efab0af014dec588e07af05f9
SSDEEP

3072:HcM0FuD8QaTbsCjyoFlQsQhs6ScQDNkw50iZb9PDtjaDxfD+QEnJTQFUPgo6:HcXFcPdCEhssQDWw1RDqR+xJk2A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad172fb916775159d6a596b9af5c8fe6_JaffaCakes118

Files

ad172fb916775159d6a596b9af5c8fe6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d5b4767a131935e616b1eaa7a6aa50e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
HeapAlloc
HeapFree
GetProcessHeap
GetModuleHandleA
GetProcAddress
LoadLibraryA
WaitForSingleObject
CreateThread
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RaiseException
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
RtlUnwind
HeapSize
LoadLibraryW
HeapReAlloc

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 186KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gkjclrh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5b4767a131935e616b1eaa7a6aa50e0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 186KB - Virtual size: 213KB

gkjclrh Size: - Virtual size: 4KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 186KB - Virtual size: 213KB

gkjclrh
Size: - Virtual size: 4KB