1b051caef156558321485fbd4108685b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b051caef156558321485fbd4108685b_JaffaCakes118
Size

446KB
MD5

1b051caef156558321485fbd4108685b
SHA1

b3e4ce19eecc661ecb7b138dffcee3e31c131688
SHA256

399790f5425633e5fd8407f9405867f2f94f51b52e8e673f9d1dcb9d4a7a663b
SHA512

2ffe430f29e5a1ae25428528d0517eb600d2a9d8e5b67531be195765be300eff13a653420935d39b54bf2daac54963827c97f3465288e35d975a1bdc877d2126
SSDEEP

6144:YvYvXC93u044V1YchIh9W6bhfMouL0PcT/kEXpIlsEKjacxNA3epNE3nLyxVSoD:aYvcVaEIhgudhiXEsEoZc3efuCB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b051caef156558321485fbd4108685b_JaffaCakes118

Files

1b051caef156558321485fbd4108685b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

VSSVC.pdb

Exports

Exports

??0CVssSqlWriterWrapper@@QAE@XZ
??1CVssSqlWriterWrapper@@QAE@XZ
?CreateSqlWriter@CVssSqlWriterWrapper@@QAEJXZ
?DestroySqlWriter@CVssSqlWriterWrapper@@QAEXXZ

Sections

.text
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE