3de05e26ec2c678f7735c17d046ac252_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3de05e26ec2c678f7735c17d046ac252_JaffaCakes118
Size

380KB
MD5

3de05e26ec2c678f7735c17d046ac252
SHA1

52f200da2ce7c2750a1f2423dd9730dd9a9703c2
SHA256

06b1e3023e65e997e34f5f7995103b5edc29d9cd4c9fac2915e33aca38edb5f1
SHA512

ea17c78d89b13b493d9746f59b192330dbc5e874a3af9556b441b3d3c2b504a4f5649d2333f0a90562210ba3ace4145011fe64d7cc6b4ec8fef756ea0e677b17
SSDEEP

6144:VN9bQBWAG2H4I1nJ2z1sVhcl8hOS3P6DRvbJ1hiNJoGpC0gt9fY:VNa22YI1JO1KOSAv4NGGMTt9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de05e26ec2c678f7735c17d046ac252_JaffaCakes118

Files

3de05e26ec2c678f7735c17d046ac252_JaffaCakes118
.exe windows:5 windows x86 arch:x86

007f7209ce5b21b4494bce189afaa5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ