0b0ec6ac4773de883a5e2a65a3294b67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b0ec6ac4773de883a5e2a65a3294b67_JaffaCakes118
Size

204KB
MD5

0b0ec6ac4773de883a5e2a65a3294b67
SHA1

83fa6b731e6c5159d6d7d5fe5589682e77caa1cb
SHA256

6b9dd732d0a3723f85316bf9893db74d7d90ed7e743e6698ffeec661d0ec56e5
SHA512

1a40ef4e234dbcce5d397f4af6e1156ed23a2a7961211f0156fc76053e27cd7d3df1914173e4eb3086daf2c897c0542ec6c642a264098ebf65431ff7583ea042
SSDEEP

6144:0cOe+1I5W0P4OGhzB5riVULRFkuYQtYCEL:EpIhqhtsUkuxOC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b0ec6ac4773de883a5e2a65a3294b67_JaffaCakes118

Files

0b0ec6ac4773de883a5e2a65a3294b67_JaffaCakes118
.exe windows:5 windows x86 arch:x86

50eeeeddde300914f2e7fa95b9bc05a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
OutputDebugStringW
GetNativeSystemInfo
QueryPerformanceFrequency
DisconnectNamedPipe

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegCloseKey

odbc32

SQLBulkOperations

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ