31d62cf2727d58b6b31f2793dbe491b0_JaffaCakes118

General

Target

31d62cf2727d58b6b31f2793dbe491b0_JaffaCakes118
Size

300KB
MD5

31d62cf2727d58b6b31f2793dbe491b0
SHA1

fa7613b8673f820eb5d393cf811a3a0560059542
SHA256

5c109893a4bc17b169ef560c620d1e9d36871a65ffc52bc0d5df200bf3a5e647
SHA512

d2fe8c11bcfa357b0a63fe988c8c54521af725a44c11c5225b9172e4c9c2e48290bfb601d7705ee5919a068b08b343a544ec766da61e4b5413b12fcb1ec4b50e
SSDEEP

6144:qdbmR1pgg7vzSiiZ7147UIyMysKRovyfWJMHnv/BHwm:0mZj7vc1IUmyJivSWGHHBQm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d62cf2727d58b6b31f2793dbe491b0_JaffaCakes118

Files

31d62cf2727d58b6b31f2793dbe491b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46632cc553832833c80063423bf7dce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructW
OpenEventA
SetCurrentDirectoryA
GlobalWire
HeapUnlock
VerifyVersionInfoA
GlobalFindAtomA
IsBadCodePtr
CreateNamedPipeA
WaitForSingleObjectEx
LZStart
EnumUILanguagesA
SetConsoleCursorInfo
WaitForDebugEvent
TlsFree
HeapDestroy
Module32First
OutputDebugStringA
ResetWriteWatch
GetFileSize
EscapeCommFunction
GetComputerNameExA
FreeConsole
SetErrorMode
GetSystemTimes
TerminateProcess
PeekConsoleInputA
GetProcessHeap
CopyFileA
CloseHandle
VirtualAllocEx
GlobalUnlock
SetFilePointerEx
ClearCommError
EnumSystemLocalesA
ExpandEnvironmentStringsA
UnlockFileEx
GetProfileSectionA
WriteConsoleInputA
GetDriveTypeA
SetConsoleNumberOfCommandsA
SetMessageWaitingIndicator
ReadConsoleA
GetCommandLineA
ExpandEnvironmentStringsA
HeapSize
IsBadStringPtrA
FindNextVolumeMountPointW
lstrcmp
EnumSystemCodePagesA
WaitForSingleObject
GetDiskFreeSpaceExA
PurgeComm
GetVolumePathNameA
OpenProcess
SetEvent
GetEnvironmentStringsA
GetTempPathA
GetProcessShutdownParameters
GetProcessWorkingSetSize
GetFileAttributesExA

odbc32

SQLBindCol

Sections

.text
Size: 12KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46632cc553832833c80063423bf7dce6

Headers

File Characteristics

Imports

kernel32

odbc32

Sections

.text Size: 12KB - Virtual size: 218KB

.rdata Size: 8KB - Virtual size: 5KB

.rsrc Size: 276KB - Virtual size: 272KB

.text
Size: 12KB - Virtual size: 218KB

.rdata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 276KB - Virtual size: 272KB