2d0c8a81abb690d43c302e0c242e916d_JaffaCakes118 | Triage

Sharing

General

Target

2d0c8a81abb690d43c302e0c242e916d_JaffaCakes118
Size

398KB
MD5

2d0c8a81abb690d43c302e0c242e916d
SHA1

b54ce6c1b3d30965f0e2928b125bd620fcabbced
SHA256

a2b9cd8a63412d5cde4e99c5f7ae9b3c3ceb4e9b578f0334c01cfb9d8474c1f8
SHA512

540234dd2020e3dddbf87e2eff369cc17055116f5a1cb725d9d612604bccc5268b328c462a33472e99ed6fd5e317e93232f76e52d0112170e2383d64ed03d417
SSDEEP

12288:O1cRu9818ngMcOfJ7PSCogqDqHbIdBRv4F:MKMcMFvo9Kef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d0c8a81abb690d43c302e0c242e916d_JaffaCakes118

Files

2d0c8a81abb690d43c302e0c242e916d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

333555ec5680ea8ae2a66792b984a695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
QueryPerformanceFrequency
RaiseException
GetThreadLocale
InterlockedExchange
RegisterWowExec
GetVersionExW
InitializeCriticalSection
CopyFileW
GetLocaleInfoA

user32

TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ