3b4d5a8159695c59f5d3acbdd915f7e3_JaffaCakes118

General

Target

3b4d5a8159695c59f5d3acbdd915f7e3_JaffaCakes118
Size

84KB
MD5

3b4d5a8159695c59f5d3acbdd915f7e3
SHA1

69d4839f434fada124d9c9a0706629acfde011c8
SHA256

f23a17da7384a9bdd9a13c9b089a6f1695d62a3500a8d6fe9691dc2308e63f36
SHA512

6e4b1833a4311772557445666ca936bdd6536f0024f9c4c6889acc6c3f9d3adad7bffa2a6d0e84e1751ca58c573b2bfd310efc20f9f13d391055ae0de2da69be
SSDEEP

1536:LIgwJEuejMHreg7FOnb5CRAjqlvX8glxB5YyFjN+8gBA9zlXnXJ4441:mBlFu4SjIzlxTYZKX4441

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b4d5a8159695c59f5d3acbdd915f7e3_JaffaCakes118

Files

3b4d5a8159695c59f5d3acbdd915f7e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bd6086cbb478e960d7aee2833a821c1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
QueryDepthSList
CancelDeviceWakeupRequest
SetProcessAffinityMask
GetProcessId
MoveFileWithProgressW
IsDBCSLeadByte
LoadLibraryA
GetLastError
BackupWrite
FindResourceW
ReadConsoleOutputA
DeleteAtom
WriteTapemark
GetComputerNameW

odbccr32

SQLRowCount
SQLFetch
SQLMoreResults
SQLGetDescField
SQLSetStmtAttr
SQLFreeHandle
SQLGetData
SQLExecute
SQLSetDescRec
SQLExecDirect
SQLEndTran
ReleaseCLStmtResources

imagehlp

ImageLoad
BindImage
SymEnumSymbols
SymEnumerateModules64
SymInitialize
SymGetLinePrev64
SymRegisterCallback
SymGetSymPrev64
MapFileAndCheckSumW
ImageRvaToSection
SetImageConfigInformation
SymGetModuleInfo64
SymLoadModule64
UnMapAndLoad
SymLoadModule

dispex

DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
GetProxyDllInfo
DllRegisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd6086cbb478e960d7aee2833a821c1f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

odbccr32

imagehlp

dispex

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 27KB

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 260B

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 27KB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 260B