ab533640346ba047ed656019c1c2677d_JaffaCakes118

General

Target

ab533640346ba047ed656019c1c2677d_JaffaCakes118
Size

141KB
MD5

ab533640346ba047ed656019c1c2677d
SHA1

5f991558f6149cb65fd616ba9e007221f32a1b47
SHA256

9879a4045ec32a6df1d2e5b4b230e4fa5439e00561f2bd90faecebb7f1b03bea
SHA512

73fad82302713a949d7e8f3a48f02f6f37f3c4810319561cbd8946f95165abfe726a28a003326fddcc29345649c4abe52440c67d29397af90aae9aba22784795
SSDEEP

1536:r9/9fO48fCXxTdot5EFM87wkrFSpb1pu9QBORrwq1I1fR1mH3RqjhFUYWtFSC6v:rDdot5EFM87NamQawq1EIBqjbiUv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab533640346ba047ed656019c1c2677d_JaffaCakes118

Files

ab533640346ba047ed656019c1c2677d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57c6cb6c44931f3264a46602ba940820

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\buildslave\steam_rel_client_win32\build\src\overlay\gameoverlayuiexe\gameoverlayuiexe.pdb

Imports

kernel32

LoadLibraryW
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
LoadLibraryA
FreeLibrary
ExitProcess
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.irdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

57c6cb6c44931f3264a46602ba940820

Headers

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 16KB - Virtual size: 14KB

.irdata Size: 72KB - Virtual size: 72KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 16KB - Virtual size: 14KB

.irdata
Size: 72KB - Virtual size: 72KB