40e7c93a3849e39698ac10dfc156298d_JaffaCakes118

General

Target

40e7c93a3849e39698ac10dfc156298d_JaffaCakes118
Size

215KB
MD5

40e7c93a3849e39698ac10dfc156298d
SHA1

fcf795688437f43da5007da177a7a4e9de6e930e
SHA256

f71039fa17e7168c7a059f85d581d25b9fd4e48747e83fc6dce880bbfdc0fcae
SHA512

8db42ef9702c293fe17329a62774c18eaf23762d3590bb1c291ae120541ca9cc78c432da37bd6a0747ee7fbb9690a64aa7c278f94f1a43b0003504b10aac8fe7
SSDEEP

3072:zUAddxitCvja4dhdO8I1To3xbQsQadxoRzlcJpE9sraVEjavltZHx7U81U:zUA4CvD8J1TIxxpisbWvlDx7B1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e7c93a3849e39698ac10dfc156298d_JaffaCakes118

Files

40e7c93a3849e39698ac10dfc156298d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b563946c8067132d4cb4a1185b824a66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\DEVELOPMENT\VC++\Cryptor_Evolution_old\release\main.pdb

Imports

kernel32

GetStartupInfoA
GetProcessHeap
GetSystemTimeAsFileTime
SetSystemPowerState
GetCPInfo
FormatMessageW
SetFileAttributesA
CreateProcessA
GetEnvironmentVariableA
GetShortPathNameA
RemoveDirectoryA
MoveFileA
FlushFileBuffers
CreateThread
GetTempFileNameA
GetVersion
LocalAlloc
LocalFree
HeapWalk
HeapCompact
HeapAlloc
HeapCreate
HeapFree
RemoveDirectoryW
MoveFileW
FindNextFileW
FindFirstFileW
TlsSetValue
TlsAlloc
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
WriteConsoleW

msvcr71

time
strncmp
memmove
strchr
atoi
exit
wcslen
fclose
fwrite
fseek
fopen
free
malloc
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b563946c8067132d4cb4a1185b824a66

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcr71

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 86KB - Virtual size: 86KB

.data Size: 91KB - Virtual size: 90KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 86KB - Virtual size: 86KB

.data
Size: 91KB - Virtual size: 90KB

.rsrc
Size: 1KB - Virtual size: 1KB