0a74f7d9ba9870daafdd1adfc24e12cc_JaffaCakes118

General

Target

0a74f7d9ba9870daafdd1adfc24e12cc_JaffaCakes118
Size

129KB
MD5

0a74f7d9ba9870daafdd1adfc24e12cc
SHA1

e054a4b897bc07767f9d7c61ec18b6376aef97fb
SHA256

874878c4a1bb6fbddea60cd8571471d31cf79ad94894761a88b92a082bc31a54
SHA512

3c18324f6775f15a3332193b8b6897a5b4b240be93dc8e1c16e1c7702eba03fc21ca7f6da4d4e0e8c49ca862b06bf852b4f5af92682357381010523e6b76f615
SSDEEP

3072:hsKpc8rP76ABgT97Vbm+CqZ1FOZSMdPPelfO:FPxYwKOZSMxWm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a74f7d9ba9870daafdd1adfc24e12cc_JaffaCakes118

Files

0a74f7d9ba9870daafdd1adfc24e12cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c8448d3c6a1ca179822a9fc9d000588

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\cm\build\public\ee_m13r9_20051215\csi\projects\ee\dist_staging\Release\Cod\aolsoftware\aolsoftware.pdb

Imports

kernel32

InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
CompareStringA
LoadLibraryA
GetLastError
SetLastError
GetSystemDirectoryA
FreeLibrary

advapi32

RegCloseKey

xprt5

?CompareNoCase@TBstr@XPRT@@QBEHPBG@Z
?TestAccess@TFile@XPRT@@SA_NPBGI@Z
??0TBstr@XPRT@@QAE@PBDPBG@Z
?Right@TBstr@XPRT@@QBE?AV12@H@Z
?GetLength@TBstr@XPRT@@QBEHXZ
??0TBstr@XPRT@@QAE@PBG@Z
?TrimLeft@TBstr@XPRT@@QAEAAV12@XZ
?TrimRight@TBstr@XPRT@@QAEAAV12@XZ
?Left@TBstr@XPRT@@QBE?AV12@H@Z
?ReverseFind@TBstr@XPRT@@QBEHG@Z
??0TBstr@XPRT@@QAE@ABV01@@Z
??1TBstr@XPRT@@QAE@XZ
kSystemEncoding
?Append@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
?Append@TBstr@XPRT@@QAEAAV12@G@Z
?Append@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?GetString@TBstr@XPRT@@QBEPBGXZ
?GetAt@TBstr@XPRT@@QBEGH@Z
?Find@TBstr@XPRT@@QBEHGH@Z

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0c8448d3c6a1ca179822a9fc9d000588

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

xprt5

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 276B

.rsrc Size: 108KB - Virtual size: 108KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 276B

.rsrc
Size: 108KB - Virtual size: 108KB