3e0dc58a658366909cab9b17176841fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e0dc58a658366909cab9b17176841fe_JaffaCakes118
Size

380KB
MD5

3e0dc58a658366909cab9b17176841fe
SHA1

bcdbbf57f1901e3fc63e240f01a3ea418a9f8f83
SHA256

04d93b1f32c7373dd50542ec70edd2ec0ad66f73018ca6e25b2a3f0b977609f7
SHA512

ec4f65891af6a8f3383f280cefaff5c15cfb08ac6585646ec18180af7297be6791c65e1dfeec0db32346447bfde95c45f87fbcf0b8b6f8c68a7cca32fcfcce89
SSDEEP

6144:wanujMewSLZ27IvsS3Jaqjy2Q6rafhHU/Vv6If1k9tSvBv4CF7r0:qjDLmS5aqjyP6rEhH61MtSvV4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e0dc58a658366909cab9b17176841fe_JaffaCakes118

Files

3e0dc58a658366909cab9b17176841fe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

007f7209ce5b21b4494bce189afaa5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ