4f72dc33bf432b446547ad1ba521780c_JaffaCakes118 | Triage

Sharing

General

Target

4f72dc33bf432b446547ad1ba521780c_JaffaCakes118
Size

621KB
MD5

4f72dc33bf432b446547ad1ba521780c
SHA1

2f831afb287f56b0e5ac7af915ff883fd8e495b6
SHA256

41865c379e646e1d6f2414b4f84cb2fc0fc38faef0afbd8f80103fe49e265a4a
SHA512

6fbdd471c3b0f8ada22d6b5ce0cc17337ffe8f540d2fa1a560dfb9154355fc21e9dd5e74162fd652e56d3d49869ad9a42a05de4d5c471bc31c485d8dc3dcc254
SSDEEP

12288:hacuepxtPKplHpX/apWf9D+TDTocLXZiPVBE1BSlyh0Sv1lidJ:QcbyfJX7leocLXItBE1BmG0Sdlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Verrechnung-140215723170-7168878436418226530.com

Files

4f72dc33bf432b446547ad1ba521780c_JaffaCakes118
.zip
Verrechnung-140215723170-7168878436418226530.com
.exe windows:5 windows x86 arch:x86

59f9585ef5f1b676ee412935b34fe6ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

odbctrac

TraceSQLConnect
TraceSQLFetch
TraceSQLBindCol

kernel32

SetErrorMode
FindFirstFileA
FormatMessageA
CreateProcessW
GetSystemDirectoryA
FileTimeToSystemTime
GetEnvironmentVariableW
CreateSemaphoreA
GetVolumeInformationW
GetModuleHandleA
OpenFileMappingW
GetProcAddress
GetCurrentThread
Sleep
GetTickCount
ReadFile
OpenEventW
MapViewOfFile
HeapFree
GetFileAttributesW
HeapAlloc
CreateFileA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.yml
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ