12f5c8cb77014a85ef910650d97333ed_JaffaCakes118

General

Target

12f5c8cb77014a85ef910650d97333ed_JaffaCakes118
Size

11KB
MD5

12f5c8cb77014a85ef910650d97333ed
SHA1

e290393415cebeb39a27f2e3abce0b08281c66e5
SHA256

1e5ddca88ed46921e39704ef20ddc73618345d33ce7bf743927df73fc57ae315
SHA512

62dc38d958c820976c9656fafec0396cc7b3d6c447ccfe4fa4521ada271f6d2ae46f3611ed3fbb419fac35941def600a2af7578e5e3f83dd7863a525507a32f2
SSDEEP

192:+XaEfnVF0O2gn+ZxZtys9ZGRzEYHAEka3EH2JYPic4pXBkleK7QxAAqnJY:PEfnVUhZjYs3XYgEka0lif9ile5xtqn6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f5c8cb77014a85ef910650d97333ed_JaffaCakes118

Files

12f5c8cb77014a85ef910650d97333ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ca8007187704bab0db58b084181edb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\Programmieren\Codesoft Releases\Aholic Binder v1.0\Aholic Stub\Release\Aholic Stub.pdb

Imports

kernel32

lstrcpyA
lstrlenA
lstrcatA
GetTempPathA
GetModuleFileNameA
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime

user32

wsprintfA

shell32

ShellExecuteA

msvcp71

??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ

msvcr71

fopen
__CxxFrameHandler
??1exception@@UAE@XZ
__security_error_handler
_except_handler3
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_c_exit
fseek
_XcptFilter
_ismbblead
_cexit
fread
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
__dllonexit
_onexit
_controlfp
fwrite
exit
fclose
_exit

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ca8007187704bab0db58b084181edb3

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

msvcp71

msvcr71

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 552B

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 552B

.rsrc
Size: 5KB - Virtual size: 4KB