ece475dcd7dc150fdd2a50dd51af9a51_JaffaCakes118

General

Target

ece475dcd7dc150fdd2a50dd51af9a51_JaffaCakes118
Size

398KB
MD5

ece475dcd7dc150fdd2a50dd51af9a51
SHA1

d31c743b5722636d5e173277dc05cf34e124d382
SHA256

e199d65297c8c4888bf084b730f1265d316ab7c44f98b5040ad553111ab61e30
SHA512

c8c342bc26b54ce5791c973aa7f7580ca5b46ec9395020f7aa81ab16b6a304a33bf0cd824bcdfd9ae2bf6c9313ded82a7b94860f8cfec2528d5e9ca168db587c
SSDEEP

6144:awj7oQsgsvozVT3dvwDMWn9PeMI2ddad8Qr0sy+PMPmaLF9qsO+vgfo:noQHsvGdvwHPwUad8QCnP/p9qO4f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ece475dcd7dc150fdd2a50dd51af9a51_JaffaCakes118

Files

ece475dcd7dc150fdd2a50dd51af9a51_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f813a1e713f50c24541c830551189468

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetProcAddress
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
Sleep
DeleteFileW
GetModuleHandleW
GetLastError
FreeConsole
RemoveDirectoryW
SetFileAttributesW
LocalFree
LocalAlloc
ExitProcess
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DeleteCriticalSection
GetThreadLocale
InterlockedExchange
SetLastConsoleEventActive
GetVersionExW
InitializeCriticalSection
CancelWaitableTimer
GetCPInfoExA
MultiByteToWideChar
lstrlenA
CopyFileW
GetLocaleInfoA

user32

GetKeyState
BringWindowToTop
SendMessageW
GetMenuItemID
GetSubMenu
ModifyMenuW
SetRect
SystemParametersInfoW
DrawStateW
GetSysColor
LoadBitmapW
GetMenuItemCount
CopyRect
SetCursor
CheckMenuItem
GetDC
GetCapture
InflateRect
SetClassLongW
ReleaseDC
LoadCursorW
GetClientRect
GetWindowPlacement
InvalidateRect
GetSystemMetrics
UpdateWindow
EnableWindow
SetWindowRgn
ScreenToClient
DrawTextW
ShowWindow
IsWindow
ShowScrollBar
IsRectEmpty
FillRect
LoadImageW
ShowCursor
SetRectEmpty
DestroyIcon
GetTopWindow
GetParent
GetWindow
SetTimer
GetWindowRect
SetCapture
PostMessageW
KillTimer
GetFocus
TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetCursorPos
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f813a1e713f50c24541c830551189468

Headers

File Characteristics

Imports

kernel32

user32

odbc32

Sections

.text Size: 255KB - Virtual size: 255KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 133KB - Virtual size: 449KB

.rsrc Size: 6KB - Virtual size: 8KB

.text
Size: 255KB - Virtual size: 255KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 133KB - Virtual size: 449KB

.rsrc
Size: 6KB - Virtual size: 8KB