0303ef8e2c289c585422d8286facfebc_JaffaCakes118 | Triage

Sharing

General

Target

0303ef8e2c289c585422d8286facfebc_JaffaCakes118
Size

631KB
MD5

0303ef8e2c289c585422d8286facfebc
SHA1

098ac625ec940beade79acfcca1b4edae2a82241
SHA256

e454b690b63773c44fe9b200b3c5e146571c2ea84cd3b0dd4e6e4c9e7425b8b6
SHA512

fc3327b4ebffb6011384de0d704d8d73fd4d01e532f6d6987f9d95d399697ede2a480ffafa4a7ae735e1e8bd0d7836a8e3b6990ed03786bc369970109b0ae96b
SSDEEP

12288:8IVtCd5g6JdQ551QKPQE/MmOtJZmS+xqQYZLrR5JvyN+DvuCJqGU:8InCd5PJdaoKoEuIxWL9E8vuCJfU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Verrechnung-445667-5751732D0.com

Files

0303ef8e2c289c585422d8286facfebc_JaffaCakes118
.zip
Verrechnung-445667-5751732D0.com
.exe windows:5 windows x86 arch:x86

bc3388b6accbccc13b029d5f0877fdd5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetPropA
LoadIconA
CharToOemW
LoadCursorW
MessageBoxA
PostMessageW
GetClassLongW
IsCharUpperA
PeekMessageA
GetDlgItemTextW
LoadBitmapA

kernel32

ReadFile
GetVersionExA
GetTickCount
LoadLibraryExW
GetFileAttributesW
CreateProcessA
CloseHandle
LoadLibraryA
HeapAlloc
VirtualAlloc
OpenFileMappingW
FileTimeToSystemTime
CreateMailslotA
GetACP
FindResourceExA
OpenSemaphoreA
SetCurrentDirectoryW
WriteConsoleW
CopyFileW

odbctrac

TraceSQLFetch
TraceSQLCancel
TraceSQLConnect

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ