f7453cba7acd9415b15cb7eace6b9d93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7453cba7acd9415b15cb7eace6b9d93_JaffaCakes118
Size

395KB
MD5

f7453cba7acd9415b15cb7eace6b9d93
SHA1

835d4b3622f1708d8930fd64b10d4f57c9278a02
SHA256

2dc8e1bbc2f918b0776dddff2c3ecbb2c9f56c654b20044a04a1780a7b14d983
SHA512

3ab770c87b0ee11acff18291c9fef6b8887472b4ea09e87bf74c9307ede0c752fb61343caff929c41bba25b08620079990fb6729f7acbd1a4f976e18c140c3e4
SSDEEP

6144:D1alZG3/aZ/7qtkJDawIFp/mJI1SOETCCcnXRK52FiGzhwB6sAP1JnjXa:A8yxHDa9fmySOaCBn4AVwLEzza

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7453cba7acd9415b15cb7eace6b9d93_JaffaCakes118

Files

f7453cba7acd9415b15cb7eace6b9d93_JaffaCakes118
.exe windows:5 windows x86 arch:x86

333555ec5680ea8ae2a66792b984a695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
QueryPerformanceFrequency
RaiseException
GetThreadLocale
InterlockedExchange
RegisterWowExec
GetVersionExW
InitializeCriticalSection
CopyFileW
GetLocaleInfoA

user32

TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ