fadc096af1bf4245906e433c5aee49cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fadc096af1bf4245906e433c5aee49cb_JaffaCakes118
Size

399KB
MD5

fadc096af1bf4245906e433c5aee49cb
SHA1

486843090fc921bb612b04902f828ef2c86e76df
SHA256

dc540422f58318f454e34fc9c2a682ad6b30048b45ebf9b190b215316b9e8eb4
SHA512

e0d099b4f7b8adf2a1ebb8e38fc4a9628713e27cb9d16480aaf31392335f391c25f11ea0f473b3baf39a652aa0ca0b85f454d53cb88d0de5794ec69b6a29ac27
SSDEEP

6144:C4A9ZQgUyUB8YEfmsw8Tn7H7LCgjL6eYG7ayqZdZIVlIa12Pq901LjmmrVugjg49:CVHoydhfJr7bLC0RLIPq9+jUgjg4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fadc096af1bf4245906e433c5aee49cb_JaffaCakes118

Files

fadc096af1bf4245906e433c5aee49cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdb9f6fb872d54400477a7d319a27bb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
RtlMoveMemory
GlobalFix
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
ExitProcess

user32

PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ