23e0d97bce6ed82c3a20cd92ff255920_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23e0d97bce6ed82c3a20cd92ff255920_JaffaCakes118
Size

381KB
MD5

23e0d97bce6ed82c3a20cd92ff255920
SHA1

6dc9b0e94b9e64c93a96e0f9ddb4015aa074d366
SHA256

9013ff61cfcad84e34e343e80f83c6e2c2c7b164a8197e262ed3ac630614719e
SHA512

56966a0a05916acf86fd697000b2aa4a1936dac92c9d39891214ac6d16cc9c8f139ac7591e7dd1f11a7278934cb11cfd5e6d00bd1479de8ee1ac74045664e416
SSDEEP

6144:aTJOXmzLCbVupFyLW6J7d7WHoRqpydcObEtzk8OfhJwqev:9W3CbVupACyNa8cOCk8SCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23e0d97bce6ed82c3a20cd92ff255920_JaffaCakes118

Files

23e0d97bce6ed82c3a20cd92ff255920_JaffaCakes118
.exe windows:5 windows x86 arch:x86

007f7209ce5b21b4494bce189afaa5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ