18ceef02ac8f5a4b45a1e0122aa33ecd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18ceef02ac8f5a4b45a1e0122aa33ecd_JaffaCakes118
Size

304KB
MD5

18ceef02ac8f5a4b45a1e0122aa33ecd
SHA1

05ffdb5fedcdae48b5b3b9f68385f065ccc606c6
SHA256

c4c156d0846afeb265f5d4888143d98546ea09e873bf0aa45b9bcffbdda4e2a4
SHA512

0db5359592455fc5bb94101656bb62dcf51610bc1c4f948b776295701db65ba2bf6857fba69127525a57bbea1f9e544b88f16690ed791f3c13c8df10e3411056
SSDEEP

6144:AmKsJ136AhjK/YQ/a9nVO93QNthw/gt0V7ladU4O:zDKAMa1t2/I0V5ad

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ceef02ac8f5a4b45a1e0122aa33ecd_JaffaCakes118

Files

18ceef02ac8f5a4b45a1e0122aa33ecd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8992758de74ccc9a6937d4485541ab45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetVersionExA
GetProcessShutdownParameters
FreeEnvironmentStringsA
TlsAlloc
GetWindowsDirectoryA
EndUpdateResourceA
FindNextVolumeA
GetFileType
FindNextChangeNotification
SignalObjectAndWait
WritePrivateProfileSectionA
GlobalSize
GetExitCodeProcess
SetErrorMode
GetLocaleInfoA
GlobalMemoryStatus
GetFileAttributesExA
GetConsoleTitleA
GetVolumePathNameA
HeapReAlloc
GetSystemWindowsDirectoryA
VirtualAlloc
GlobalLock
GetEnvironmentStringsA
ProcessIdToSessionId
GetConsoleMode
GetConsoleTitleA
ReadConsoleOutputAttribute

odbc32

SQLSetStmtAttr

opengl32

glBegin

glu32

gluProject

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ