40602338699db1958b243066207b84d7_JaffaCakes118

General

Target

40602338699db1958b243066207b84d7_JaffaCakes118
Size

40KB
MD5

40602338699db1958b243066207b84d7
SHA1

ed30b1987ed053984ec18d8b6974d820abe0c41f
SHA256

a3bfcf32c8fd9e31f1565709154cec5ba2fd5e849723b0f42cc43398f2d592e8
SHA512

4761c0c55cf0da5770fd83fa86212b5ffa394503d512772611d9bc193675fc9101c46a4eec5fd301e3698d6167967ffaeaa78f21185cadfef2131263991ad049
SSDEEP

384:bx/Nky8blhkuPIn2/I3Pmtu2DXRSb7cUkD5s8ZXWuF2TDa6/JlHa6TLNj1RvPlo:bx/Wy4UuBIfm5cUUWK0muF2T717Xl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40602338699db1958b243066207b84d7_JaffaCakes118

Files

40602338699db1958b243066207b84d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af70a8c43ee54e493706d1b9a6b44b65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\neilcar\My Documents\Visual Studio Projects\tzinfo\tzinfo\Release\tzinfo.pdb

Imports

kernel32

GetTimeZoneInformation
ExitProcess
GetModuleHandleA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

af70a8c43ee54e493706d1b9a6b44b65

Headers

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB