ac9a001445654c58982618d2d6cc1418_JaffaCakes118

General

Target

ac9a001445654c58982618d2d6cc1418_JaffaCakes118
Size

884KB
MD5

ac9a001445654c58982618d2d6cc1418
SHA1

6fed841a22278a9e998dda68d5dcd10667bd1d83
SHA256

5b12adf7bf513dce520e5457c3e9fc301e2855428aa885724f0b8ed812791266
SHA512

91be7b1fd4d47b3e1e069f3d21adfedb5e7c1bc7d22d80120cb3fd6269619b1650673a9ed5f941668d777ceabf2f23660c1fe779c7d56865e00a53829ed744e7
SSDEEP

24576:HdP2tAVjQc3NyVgQk2ivJFVGaEz9ItPepJgWIT03:HR573sV3RkGawIIprIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac9a001445654c58982618d2d6cc1418_JaffaCakes118

Files

ac9a001445654c58982618d2d6cc1418_JaffaCakes118
.exe windows:5 windows x86 arch:x86

980edb08da496f6ed74477fb4356ac6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
CreateProcessW
WriteFile
CloseHandle
CreateFileW
lstrcatW
GetTempPathW
WaitForSingleObject
PeekNamedPipe
ReadFile
SetNamedPipeHandleState
WaitNamedPipeW
Sleep
CreateThread
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

winmm

timeGetTime

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 844KB - Virtual size: 847KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

980edb08da496f6ed74477fb4356ac6a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winmm

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 844KB - Virtual size: 847KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 844KB - Virtual size: 847KB

.reloc
Size: 5KB - Virtual size: 5KB