17575d663d84cc2762dc95cfb8fcd9f3_JaffaCakes118

General

Target

17575d663d84cc2762dc95cfb8fcd9f3_JaffaCakes118
Size

62KB
MD5

17575d663d84cc2762dc95cfb8fcd9f3
SHA1

9ff710a1915e3bdf4ecc76c7a8cd017b7af124eb
SHA256

d701738eff7903d84aae4a0913fd12ac52e49ba01e6356bde93c56f4f11ebd27
SHA512

9b138b5668edd5d28c582229379ab16f9ea9711c0bdf886cbf5c6559114f6a4b45e860bd876197923c70da43c9b02fd8f092e8a8393008783f4b7c92bc5a3d10
SSDEEP

768:SqN6CSuQ36JGDkMCEZ+KhsWA71VMhnuRjhZcFkud22nEDZnc7E5m8LNLNW:SRCSuAnO3KrA7snYZcFkPFL9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17575d663d84cc2762dc95cfb8fcd9f3_JaffaCakes118

Files

17575d663d84cc2762dc95cfb8fcd9f3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f750ffb196e3a792674964cadf2c4cd2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opencl

clGetDeviceIDs
clGetPlatformInfo
clGetPlatformIDs
clGetDeviceInfo

wsock32

socket
closesocket
WSACleanup
htons
gethostbyname
WSAStartup
send
connect

kernel32

GetModuleFileNameW
FlushFileBuffers
CloseHandle
CreateFileW
HeapReAlloc
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
GetLastError
HeapFree
RtlUnwind
HeapAlloc
GetCommandLineA
HeapSetInformation
HeapCreate
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
RaiseException
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
LoadLibraryW

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f750ffb196e3a792674964cadf2c4cd2

Headers

DLL Characteristics

File Characteristics

Imports

opencl

wsock32

kernel32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 5KB - Virtual size: 4KB