ae798f869af0ab9280cc6cf20b85f99c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ae798f869af0ab9280cc6cf20b85f99c_JaffaCakes118
Size

151KB
MD5

ae798f869af0ab9280cc6cf20b85f99c
SHA1

ad20abff1a2302b028ac5fb25ced501c71f0f59f
SHA256

144c3f7903bde203ebc3d2a88490d0e09c8a9186ff7663087c8987a65930f886
SHA512

0e099afbdef6b7eaae95767a5fbdcf31b0a16469dd379332d4b3b7d974c9b13a7020835983e1788b0017d14b12e12374c535c07806f889ebbd874afbd89984b2
SSDEEP

3072:YbAXCQ6UL9e9i/wKsU54eKJVPfILNkAPuLNvaHesG1qeIaB:Yb1xUL9e9GPsUe7JVHILmaCRB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae798f869af0ab9280cc6cf20b85f99c_JaffaCakes118

Files

ae798f869af0ab9280cc6cf20b85f99c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Exports

Exports

CreateThread
CreateThread1
CreateThread13
CreateThread16
CreateThread17
CreateThread18
CreateThread19
CreateThread2
CreateThread20
CreateThread3
CreateThread4
CreateThread5
CreateThread6
KiFastSystemCallRet
NtReadFile
NtWriteFile16
RtlQueueWorkItem
UnitCdStatusEx

Sections

CODE
Size: 117KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 468KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.teraphy
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

CODE Size: 117KB - Virtual size: 240KB

DATA Size: 1KB - Virtual size: 4KB

BSS Size: - Virtual size: 468KB

.idata Size: 8KB - Virtual size: 8KB

.edata Size: 512B - Virtual size: 496B

.tls Size: - Virtual size: 12B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 15KB - Virtual size: 15KB

.rsrc Size: 5KB - Virtual size: 5KB

.teraphy Size: 1KB - Virtual size: 4KB

CODE
Size: 117KB - Virtual size: 240KB

DATA
Size: 1KB - Virtual size: 4KB

BSS
Size: - Virtual size: 468KB

.idata
Size: 8KB - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 496B

.tls
Size: - Virtual size: 12B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 5KB - Virtual size: 5KB

.teraphy
Size: 1KB - Virtual size: 4KB