0f1135b55b1f278480c766d3c728667c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f1135b55b1f278480c766d3c728667c_JaffaCakes118
Size

380KB
MD5

0f1135b55b1f278480c766d3c728667c
SHA1

3f9d5c65a83dfa7d6b523cfc1845b26ab73b4f3b
SHA256

26bf43c256ab525768e7c0b207e87077143abb52da4c72608261d14786e2f248
SHA512

7aca3f2c66c55a677060ae140c03cb7213a439af10201866523c53ae1b7883698832baa08efc04c656d18834847c7bf80b805537cb42d3bebe2a7768d05f0fe1
SSDEEP

6144:3F1NjgvF+ofEDyax5ze408i27shyz9rJf9gFDwTz5ZpxS/jVmAXHad1J:V1RMF+ppvegAU9tf9gF0TzMj4AXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f1135b55b1f278480c766d3c728667c_JaffaCakes118

Files

0f1135b55b1f278480c766d3c728667c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b5b1bbdb6a19b787e7a7e4debaab1924

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
OutputDebugStringW
GetNativeSystemInfo
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegCloseKey

odbc32

SQLFetch

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ