431a5ccd188f9a94cb7c712c76ff7be4_JaffaCakes118

General

Target

431a5ccd188f9a94cb7c712c76ff7be4_JaffaCakes118
Size

204KB
MD5

431a5ccd188f9a94cb7c712c76ff7be4
SHA1

932976f3efe4cd92b308958af2dae63292bad2ec
SHA256

6babe615100564f46c412fddc63c733c4967dc2a2b9a4eb70513fa372685e256
SHA512

44b41b849fbfd03192b42e36e6dc645d945747a4ce6e97117b5a4306d333977558d4d920b23703d0f108676c0e59f15263c5e5c2202b9c239a4d5b77fce702b6
SSDEEP

3072:ndoVmIyz0/DegfAsGqsgJAjSYMoejjjg1S6XrzBCIZHDnQ2:doEIyz0j4sGqPAjSYMoejjjGPpHb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
431a5ccd188f9a94cb7c712c76ff7be4_JaffaCakes118

Files

431a5ccd188f9a94cb7c712c76ff7be4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7595193b2ed3a3af10efd9fd5768a9a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\clearcase\n65776_view\Wt_utps_code\Utps_v100r001\utps\solution\win32\AddPbk\Release\AddPbk.pdb

Imports

shell32

ShellExecuteW
SHGetFolderPathW

kernel32

GetTickCount
IsBadCodePtr
IsBadReadPtr
GetVersionExW
GetProcAddress
LoadLibraryW
GlobalFree
GlobalAlloc
SetFileAttributesW
GetFileAttributesW
GetModuleFileNameW
FreeLibrary
VirtualQuery
InterlockedExchange
LoadLibraryA
HeapSize
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
ExitProcess
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7595193b2ed3a3af10efd9fd5768a9a5

Headers

File Characteristics

PDB Paths

Imports

shell32

kernel32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 48KB - Virtual size: 47KB

.text Size: 116KB - Virtual size: 116KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 48KB - Virtual size: 47KB

.text
Size: 116KB - Virtual size: 116KB