25492435e065d99855be0c5f3860a771_JaffaCakes118

General

Target

25492435e065d99855be0c5f3860a771_JaffaCakes118
Size

243KB
MD5

25492435e065d99855be0c5f3860a771
SHA1

4938ce0f5786d61560aeef9c9c94cf4e231ab97c
SHA256

d58475e9fc5aee734cdd9312ae9277de5be466768036cf5be3f928cb52b00850
SHA512

7e657adb853ac0663cc7d4bd41942fd6cd89b434cd3225c486044a537b31f3ae1d7fb34fc7f86ce58fec4e5d4c7f2eed15d3adee91dfecba4638da92bb3f664f
SSDEEP

6144:iBf2wR4wHP+z0xpERSFEGSv0sQsCLUHJ6kqVnCPCX:iBSVz0xpOSA0lLjTws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/PO-53718.pdf.exe

Files

25492435e065d99855be0c5f3860a771_JaffaCakes118
.ace
out.ace
.ace
PO-53718.pdf.exe
.exe windows:6 windows x86 arch:x86

2c58cc87277520c45be866d28ef20045

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\xampp\htdocs\Loct\47c15055fe58450a8cec6028896a1c12\Loader\Project2\Release\Project2.pdb

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
_exit
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter

kernel32

GetModuleHandleW
GetStartupInfoW
VirtualProtect

pdh

PdhSetCounterScaleFactor
PdhSelectDataSourceW
PdhVbGetDoubleCounterValue
PdhParseInstanceNameW
PdhGetCounterInfoW
PdhFormatFromRawValue

oleaut32

VarUI4FromUI1
VarUI4FromDisp
VarI1FromR8
OleLoadPictureFileEx

loadperf

UnloadPerfCounterTextStringsA

msacm32

acmStreamReset
acmDriverDetailsA
acmDriverDetailsW
acmDriverRemove
acmFormatDetailsA
acmStreamSize

setupapi

SetupGetSourceInfoA
SetupDiInstallDevice
SetupDuplicateDiskSpaceListW

mapi32

ord203
ord181
ord62

user32

GetDC
MessageBoxW
GrayStringA

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c58cc87277520c45be866d28ef20045

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

pdh

oleaut32

loadperf

msacm32

setupapi

mapi32

user32

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 220KB - Virtual size: 220KB

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 220KB - Virtual size: 220KB