249bbb94e0cff37e35008600bb239276_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

249bbb94e0cff37e35008600bb239276_JaffaCakes118
Size

233KB
MD5

249bbb94e0cff37e35008600bb239276
SHA1

ffa962bffe079220fb8ddcf20d48a532083acf54
SHA256

f7a2331972bf06467d0e1addcf6a62e83c7c806d60a9f96c0a127e560b28a8e7
SHA512

5f99f87aaa11acd64267d23a3ad15085ee25f1c2de9dda57afafe772c7202e1287eecbedb80b08ec8134f411f981b97febfafd9d16be51c99c9166b2acd89078
SSDEEP

6144:34HJwxcKBcCh/16+b6cqZfdLLFz4nTFjCaVgP+op:mmC2h/13b6FVp4nJCtj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
249bbb94e0cff37e35008600bb239276_JaffaCakes118

Files

249bbb94e0cff37e35008600bb239276_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6a391c274ac3c925d2c756896b1210bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalMemoryStatusEx
RaiseException
GlobalFix
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetExitCodeProcess
CreateMutexW
GetACP

user32

DrawIcon
IsZoomed
LoadIconW
SystemParametersInfoW
GetCursorPos
SetParent
GetWindowDC
wsprintfA
SetWindowPos
GetParent
SetRect
GetWindowRect
SetTimer
ShowWindow
LoadImageW
GetDC
ReleaseDC
FindWindowW
IsWindowEnabled
UpdateWindow
CallWindowProcW
KillTimer
GetActiveWindow
MessageBoxW
InvalidateRect
AppendMenuW
GetClientRect
PeekMessageW
TranslateMessage
EnableWindow
GetClassInfoW
PostMessageW
SendMessageW

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 642KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ