f006dadf1854af951165fdd24b281260_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f006dadf1854af951165fdd24b281260_JaffaCakes118
Size

5.4MB
MD5

f006dadf1854af951165fdd24b281260
SHA1

e0f38544fa0c10abad23e7b56c2b60fe09296c86
SHA256

7433c782979305eff90633ffefc1265414b9137951eff047acf046d7714b5d9f
SHA512

2b70aa6f51df7c6c4ca7188166f0070b93b152fd102f106fc7834e115b57a44c2b86cfe349cc088c8e9cbc53a981e9de7f3e1972ab83cdb72c972e66b0609573
SSDEEP

98304:jrX0vWdUNSZz17XyF8/qOJGikkd1R8tmHcWgocXP143y9l5mfGlZ:v0vX0hWwNfPic8loIUyJmOZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f006dadf1854af951165fdd24b281260_JaffaCakes118

Files

f006dadf1854af951165fdd24b281260_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2c16532e0ca273a693486e6c4831917

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\Programmieren\Codesoft Releases\Aholic Binder v1.0\Clean Release\Aholic Stub\Release\Aholic Stub.pdb

Imports

kernel32

lstrcpyA
lstrlenA
lstrcatA
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
GetLastError
LCMapStringW
GetCPInfo
GetModuleHandleA
ExitProcess
GetModuleFileNameA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
LoadLibraryW
SetHandleCount
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetLocaleInfoW
CreateFileW
SetEndOfFile

user32

wsprintfA

Sections

.text
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2c16532e0ca273a693486e6c4831917

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 188KB - Virtual size: 186KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 188KB - Virtual size: 186KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 12KB - Virtual size: 9KB