a3de38d4b7f9e33de9016ca3dcf20529_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3de38d4b7f9e33de9016ca3dcf20529_JaffaCakes118
Size

641KB
MD5

a3de38d4b7f9e33de9016ca3dcf20529
SHA1

5352d861559d8e908d32941ce734f5495589ffee
SHA256

dc0bc07aad121d9b4b9ea05b07dcae6be53a6a1974328881a7f8df0b22b73642
SHA512

4169d1d8009afd9aa56a2db57ca54f0795620b5268e37d9eff3e9cb424ff3b226786cf44e4aa04b94b5c85703ffeb11b3790b681b9828eca6f27ffc863c4f18e
SSDEEP

12288:NBd52bW0Aqu4vv23fmcIfwT9uob0aHX5VVYqWpIM0JbeyDir:NBdRHQ4fJwwTt0gXASM0JbeEir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3de38d4b7f9e33de9016ca3dcf20529_JaffaCakes118

Files

a3de38d4b7f9e33de9016ca3dcf20529_JaffaCakes118
.exe windows:5 windows x86 arch:x86

77a16f241bbe5273536579b239d790da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

odbctrac

TraceSQLConnect
TraceSQLFetch
TraceSQLBindCol

kernel32

SetErrorMode
FindFirstFileA
FormatMessageA
CreateProcessW
GetSystemDirectoryA
SystemTimeToFileTime
GetEnvironmentVariableW
CreateSemaphoreA
GetVolumeInformationW
GetModuleHandleA
OpenFileMappingW
GetProcAddress
GetCurrentThread
Sleep
GetTickCount
ReadFile
OpenEventW
MapViewOfFile
HeapFree
GetFileAttributesW
HeapAlloc
CreateFileA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.yml
Size: 626KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ