03fdba5c3c0af4ed98d2a8745e76096e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03fdba5c3c0af4ed98d2a8745e76096e_JaffaCakes118
Size

274KB
MD5

03fdba5c3c0af4ed98d2a8745e76096e
SHA1

7343fa871bd2b0bc68d6418b23e452a2d2f52ba8
SHA256

c64f14e4001399acc6aac1ad13d0c2feed38acb7258392ad927c9e7debaa0095
SHA512

21d33da59018179e688e328a2293e92adbe5389c6ba54e581ddf2eeb9868e1135ff34e2e44bfa23f8168e79335bbb770a03294c7938c17df440b871b8fc6f45a
SSDEEP

6144:sOIeLBSP/Y+lMcQBRu1thCnTT9zb88757FCen:sOIcBo/lCUiTBZ7nJn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03fdba5c3c0af4ed98d2a8745e76096e_JaffaCakes118

Files

03fdba5c3c0af4ed98d2a8745e76096e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

007f7209ce5b21b4494bce189afaa5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 807KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ