0c958ce90cbdc27d8e844edf0b7294ae_JaffaCakes118 | Triage

Sharing

General

Target

0c958ce90cbdc27d8e844edf0b7294ae_JaffaCakes118
Size

232KB
MD5

0c958ce90cbdc27d8e844edf0b7294ae
SHA1

19c8c71bbbe4a1fd831a724f91d254d14eef1d00
SHA256

691660a02e317de1e0d0ca5e5ebc085829fe011cfecfd9d5c927817e2654b099
SHA512

6843c51e132a438ebc6cf38f7d82210bd48ace6f9cb12ffc0761fa030c8eafd2bf0414df17a01b2005358acea2a056b07fe17b747a87e414aff75913c676112d
SSDEEP

3072:cu4Hd7wLRJGLSpz7fBoEDaCZesmff/YFaBMfucwxnUxP3hKIS+hvG4AXX:r4HJwLPGqz7fW94exXYsTcwm4+hv2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c958ce90cbdc27d8e844edf0b7294ae_JaffaCakes118

Files

0c958ce90cbdc27d8e844edf0b7294ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6a391c274ac3c925d2c756896b1210bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalMemoryStatusEx
RaiseException
GlobalFix
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetExitCodeProcess
CreateMutexW
GetACP

user32

DrawIcon
IsZoomed
LoadIconW
SystemParametersInfoW
GetCursorPos
SetParent
GetWindowDC
wsprintfA
SetWindowPos
GetParent
SetRect
GetWindowRect
SetTimer
ShowWindow
LoadImageW
GetDC
ReleaseDC
FindWindowW
IsWindowEnabled
UpdateWindow
CallWindowProcW
KillTimer
GetActiveWindow
MessageBoxW
InvalidateRect
AppendMenuW
GetClientRect
PeekMessageW
TranslateMessage
EnableWindow
GetClassInfoW
PostMessageW
SendMessageW

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 642KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ