31fd6fefd34e2a565b4bcc7b4201b2c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31fd6fefd34e2a565b4bcc7b4201b2c8_JaffaCakes118
Size

380KB
MD5

31fd6fefd34e2a565b4bcc7b4201b2c8
SHA1

fa23097efb2d99dfffae5a25fcc2e1c8268efa5d
SHA256

161841e827546ab67b6557c95d8d19d2a24f8038b817bb596a9529d20cdad025
SHA512

a825df407892ea973d612cefe0e322f5b7d9658ca5b1f2471c13417fe2911200f9fc3b55e4247ddd3270e9e268973c67b10d8aa9effe1f9e21f5a1e8342061f8
SSDEEP

6144:Dc3r/npM94ZYevjBajpzVevxmKnsW8ISPfQ5LcC2HZzKw32a0krpTssWm5r:DN+Yqatzw5mJvDnQ5AzZzKwmMVAs9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31fd6fefd34e2a565b4bcc7b4201b2c8_JaffaCakes118

Files

31fd6fefd34e2a565b4bcc7b4201b2c8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

635ebbdf4441e86c034aa5656d7d6958

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FreeConsole
OutputDebugStringW
GetThreadContext
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegCloseKey
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
UnregisterTraceGuids
TraceEvent

odbc32

SQLFreeEnv

Sections

.text
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ