General

Malware Config

Signatures

Files

• ef9018a88960eba39a5b4a2eeea0a41e_JaffaCakes118

  .exe windows:4 windows x86 arch:x86

  19b58f3f9951434f0c62e7754ba8bc4c

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  c:\Users\felix\Desktop\DesktopMüll\GV - Hax4Ever - MWF2 SKillz\stubo\Release\stub.pdb

  Imports

  msvcr80

  _except_handler4_common

  _decode_pointer

  _controlfp_s

  _onexit

  _lock

  __dllonexit

  _unlock

  _crt_debugger_hook

  __set_app_type

  _encode_pointer

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _configthreadlocale

  _initterm_e

  _initterm

  _acmdln

  exit

  _ismbblead

  _XcptFilter

  _exit

  _cexit

  __getmainargs

  _amsg_exit

  memset

  _invoke_watson

  ??2@YAPAXI@Z

  kernel32

  GetCurrentProcessId

  GetCurrentThreadId

  QueryPerformanceCounter

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetStartupInfoA

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  FreeLibrary

  CreateProcessA

  VirtualAllocEx

  GetThreadContext

  SetThreadContext

  ResumeThread

  LoadLibraryA

  GetProcAddress

  GetModuleFileNameA

  GetTickCount

  GetSystemTimeAsFileTime

  Sections

  .text

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 284KB - Virtual size: 282KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 428B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ