36c7e2a563be5bb7eb4ddd664947a14c_JaffaCakes118

General

Target

36c7e2a563be5bb7eb4ddd664947a14c_JaffaCakes118
Size

44KB
MD5

36c7e2a563be5bb7eb4ddd664947a14c
SHA1

8abf44d926c8ea5e824eec7ad44ee647a505c0fa
SHA256

98caeaa0c416b6dee6e8fe06d4423bc11fb3e65e43f557c4147b770ab9b60b07
SHA512

5b212ede440cff260e812d8680bd8504ffe4d0c71d1dbe7d2be8710ff1221206aecf18a83038129b7944a13f748b3a52cc1ff8b309fb299e78504ab6a6594916
SSDEEP

384:7BMik35dkJ3ro150mCWxRsb2kaSJ8U/EiWEFcSKDFc5YgxsHIAWSzWOYP6VcP:tPk3x50mkCzSOiKEFcSAcfSHXAOYSVc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c7e2a563be5bb7eb4ddd664947a14c_JaffaCakes118

Files

36c7e2a563be5bb7eb4ddd664947a14c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

940b793f2b8e719127d6edd94d4816db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\vss\cvdi3\Acme\pvs2_0\devMD\packageStuff\mdfix01\Release\mdfix01.pdb

Imports

kernel32

GetFileAttributesA
CopyFileA
GetLastError
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
CloseHandle
CreateFileA
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
SetFilePointer
RtlUnwind
SetEndOfFile
ReadFile
SetStdHandle
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

940b793f2b8e719127d6edd94d4816db

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB