d3a5f8821eaf8bf8c9218c37809131ed_JaffaCakes118

General

Target

d3a5f8821eaf8bf8c9218c37809131ed_JaffaCakes118
Size

625KB
MD5

d3a5f8821eaf8bf8c9218c37809131ed
SHA1

e38858251bc6a2f2d82ebb8963f835da7da6f720
SHA256

89dc684d93df60f26ffbfa2e3e7a5db4cc803768b284fa416b079bc23babb9c6
SHA512

edbdbe052630f7df40bf8f404ab57935a46daa8f328165d2242ec61fc85597e70de5711d4c73ed2539d7117ed023b7443b68b9dc73500e9958d59f764bb06a9d
SSDEEP

12288:zC3LmTqbkAaOt5RbRl6hVKciKoUVelXtjYs0BUMRRCq6IKM0f:zC3LESkATfRbR4XReMRJUf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3a5f8821eaf8bf8c9218c37809131ed_JaffaCakes118

Files

d3a5f8821eaf8bf8c9218c37809131ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ca8007187704bab0db58b084181edb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\Programmieren\Codesoft Releases\Aholic Binder v1.0\Aholic Stub\Release\Aholic Stub.pdb

Imports

kernel32

lstrcpyA
lstrlenA
lstrcatA
GetTempPathA
GetModuleFileNameA
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime

user32

wsprintfA

shell32

ShellExecuteA

msvcp71

??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ

msvcr71

fopen
__CxxFrameHandler
??1exception@@UAE@XZ
__security_error_handler
_except_handler3
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_c_exit
fseek
_XcptFilter
_ismbblead
_cexit
fread
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
__dllonexit
_onexit
_controlfp
fwrite
exit
fclose
_exit

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ca8007187704bab0db58b084181edb3

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

msvcp71

msvcr71

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 552B

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 552B

.rsrc
Size: 8KB - Virtual size: 7KB