28ccf1ad4f738f009807f367af826c7b_JaffaCakes118 | Triage

Sharing

General

Target

28ccf1ad4f738f009807f367af826c7b_JaffaCakes118
Size

641KB
MD5

28ccf1ad4f738f009807f367af826c7b
SHA1

22b14a5cc7875de79217fd72989fa3a965806c95
SHA256

1b705a07b4698ba503e4b188682156eb0f862962dc5897964cf0fc21737d00b5
SHA512

3fefb2d014974092e2efde820be0ad85e72e692e42f68f3e03518b93e65b5c30be43401e9f7590b5bb4a0e8c91fc6a1def5efe2664e57029c5c7dde558c71e77
SSDEEP

12288:qBd52bW0Aqu4vv23fmcIfwT9uob0aHX5VVYqWpIM0JbeyDir:qBdRHQ4fJwwTt0gXASM0JbeEir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ccf1ad4f738f009807f367af826c7b_JaffaCakes118

Files

28ccf1ad4f738f009807f367af826c7b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

77a16f241bbe5273536579b239d790da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

odbctrac

TraceSQLConnect
TraceSQLFetch
TraceSQLBindCol

kernel32

SetErrorMode
FindFirstFileA
FormatMessageA
CreateProcessW
GetSystemDirectoryA
SystemTimeToFileTime
GetEnvironmentVariableW
CreateSemaphoreA
GetVolumeInformationW
GetModuleHandleA
OpenFileMappingW
GetProcAddress
GetCurrentThread
Sleep
GetTickCount
ReadFile
OpenEventW
MapViewOfFile
HeapFree
GetFileAttributesW
HeapAlloc
CreateFileA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.yml
Size: 626KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ