29472f201977a96221e0e5fc50adf5f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29472f201977a96221e0e5fc50adf5f7_JaffaCakes118
Size

398KB
MD5

29472f201977a96221e0e5fc50adf5f7
SHA1

317d4555a09eae8b917034e9d0d2d206417cebc3
SHA256

e18049a54ef4998cc0cfd507e1a6c64cb8a685eaaac11d68063a7311ef5615d2
SHA512

5e3d6d044897675486758d2772168c53a56e8edf8d177fc1f71f86380d833cdfa146afa1b12070841937ab13a09a34df181174cd30d3bacc2fb083075075e1cb
SSDEEP

6144:nURn/9xuKp+JU8t7nMl8W55l6lIBeT/BfIwLgN3stFf3P2AQPZudA+:UV8tz7WHBBezVtfSZq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29472f201977a96221e0e5fc50adf5f7_JaffaCakes118

Files

29472f201977a96221e0e5fc50adf5f7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

333555ec5680ea8ae2a66792b984a695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
QueryPerformanceFrequency
RaiseException
GetThreadLocale
InterlockedExchange
RegisterWowExec
GetVersionExW
InitializeCriticalSection
CopyFileW
GetLocaleInfoA

user32

TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ