9576654bf4988476d4956c3124a9cc08_JaffaCakes118

General

Target

9576654bf4988476d4956c3124a9cc08_JaffaCakes118
Size

576KB
MD5

9576654bf4988476d4956c3124a9cc08
SHA1

18cf39d50baea9c01e44faf792d319ebb1520de8
SHA256

488ca53c798695064a7f8e0571e984cce8b93181c4f84060a10f83f6e991bbc7
SHA512

3f6aa4a17d9f9cf738a3617da48d9997d67218d9c9e00bc7e4af75d7a7214ee8103ff033e88c66eaaf53cf4f0af1f4aec44737eba173e43d542465daa8d4c8c4
SSDEEP

12288:0ngiCZTd6oZYrD+n3fW4Sc4sUQLEpQjhIZ1RrVC9aTa:0nxuht6ysLQLPhQ3roIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9576654bf4988476d4956c3124a9cc08_JaffaCakes118

Files

9576654bf4988476d4956c3124a9cc08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e375b54b54023cdb15806cdd3fb56085

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

z:\Kunden\Codesoft-PW-Stealer_v0.5\jaxulin Version SSPEZ\release\Codesoft-PW_Stealer_Server.pdb

Imports

kernel32

GetLastError
CreateMutexA
GetCurrentProcess
SizeofResource
LoadResource
lstrcatA
GetTempPathA
FindResourceA
GetModuleHandleA
LoadLibraryA
lstrcpyA
FreeLibrary
CloseHandle
CreateFileA
GetSystemDirectoryA
ExitProcess
lstrcmpA
ReadProcessMemory
GetProcAddress
Sleep
lstrlenA
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

advapi32

GetUserNameA
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.umap
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e375b54b54023cdb15806cdd3fb56085

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

shell32

Sections

.text Size: 40KB - Virtual size: 36KB

.umap Size: 48KB - Virtual size: 44KB

.rsrc Size: 484KB - Virtual size: 483KB

.text
Size: 40KB - Virtual size: 36KB

.umap
Size: 48KB - Virtual size: 44KB

.rsrc
Size: 484KB - Virtual size: 483KB