1b64d2551c5da6eff5680cf547fcade2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b64d2551c5da6eff5680cf547fcade2_JaffaCakes118
Size

40KB
MD5

1b64d2551c5da6eff5680cf547fcade2
SHA1

5af09b4e8af77ee04f372de2ed9180e37188a13a
SHA256

52c5bfa8dd15ae24c9b304ccf557a359fd31205b6c650985aa5b8e6f42e7f5f3
SHA512

64b499445609ca94cdaf2d591bca74c5353d237d8f8d2d0ee5dac74692413e316ecf6c89948eb6b3b6847663e1a477f49107d0de0366a9532e7f38cc97ec5e8e
SSDEEP

768:bChP14YILdoyo8wquIP0aWHR9JNS/2RkVdGF+/y89JOYFjy990X:WhP14tdZsaCRMKcV/t9J9j0eX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b64d2551c5da6eff5680cf547fcade2_JaffaCakes118

Files

1b64d2551c5da6eff5680cf547fcade2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7eb388f0b49490bbf16a4f13b5dc160

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ScrollConsoleScreenBufferA
SetConsoleWindowInfo
OpenJobObjectA
VirtualAlloc
GetConsoleScreenBufferInfo

odbc32

SQLPrepare
SQLRowCount

tapi32

lineDevSpecific
lineDevSpecificFeature

Exports

Exports

OpenTqgrdjrsys
GetJdftuybajug

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ