281177cadac11bbc14f51cdfdee933f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

281177cadac11bbc14f51cdfdee933f3_JaffaCakes118
Size

286KB
MD5

281177cadac11bbc14f51cdfdee933f3
SHA1

fd518d15521e5114fd626ffab334c3cbd7fa2824
SHA256

a39e3ea12ed130634f58a2ba0d43a928efe9ed13f9f7583bb3ab6b734d2666da
SHA512

9bfa0e06e24b118cbd0e4479410ca43332a4050265bd01b6820f7b29330adaf509b11f5c80be0c029513b958ebceea9a76259e1d30a60d5f1d65208166001525
SSDEEP

6144:lF1PGeFyUUHOTWCU/WYP5y+DLvF40Q347s6NA8Zq8vTZJyXTQe:31ueirB/WYP5PHQ34TA8ZPMXTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
281177cadac11bbc14f51cdfdee933f3_JaffaCakes118

Files

281177cadac11bbc14f51cdfdee933f3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

086953713e847f5b18e2b650cf953030

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
OutputDebugStringW
GetNativeSystemInfo
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegCloseKey

odbc32

SQLRowCount

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ