ac3c9004b617a2872f35fc83823a4cb2_JaffaCakes118

General

Target

ac3c9004b617a2872f35fc83823a4cb2_JaffaCakes118
Size

62KB
MD5

ac3c9004b617a2872f35fc83823a4cb2
SHA1

1610863ea023da38f86ad03e4ee1cb08f48975bf
SHA256

0a056abee1a800643fcb21b9f6a2dfd7165579d737e3b7062ed8cc8a529a461e
SHA512

34e3282be600664bb935e0cdcdcb760984a9876b58cad05a5e7646514a4a712d297f40306b65a183ec8e085e53259d3717966e1b81db64dd460210d360449983
SSDEEP

768:T6wT71UTtyh+hv3uAwxMe0F1PzckSpNf+0gPaal3so2YTCYHqW3cNSeinxA:+wT716eevKxMe0/rcnn/Ul3sVeKWsN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac3c9004b617a2872f35fc83823a4cb2_JaffaCakes118

Files

ac3c9004b617a2872f35fc83823a4cb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4308e9858a554f972b727429a1500dc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
GetModuleFileNameA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetProcAddress
GetModuleHandleA
VirtualProtectEx
VirtualAlloc
SetFileAttributesA
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
RaiseException
GetLastError
ReadFile
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
CreateFileA
GetACP
GetOEMCP
GetCPInfo
IsBadCodePtr
SetEndOfFile
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4308e9858a554f972b727429a1500dc5

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 8KB