401a669f1947cabb9d70a453482fd06c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

401a669f1947cabb9d70a453482fd06c_JaffaCakes118
Size

231KB
MD5

401a669f1947cabb9d70a453482fd06c
SHA1

690bf57da5ed0c6dbeb01b47c1fd0a9c63ec3a04
SHA256

531ca9fb8ec1ed9ef5809f46e5d53a9d7d3c2b155140d5f5e21e9655adb6dce9
SHA512

ab438a5f21b4fcec078d59737da9c451e0a9bfb67ab3bffb4f4f2520530933f821619e7507c16a48a5de9ee8837e42a6d907190d5454c3c623e6913915b230ed
SSDEEP

6144:YlEW2jBA4T8eaVmQBBQTC3fSGsEH9w+v06Wn:YZ2td43VmpG3fSGjH9Vv0T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
401a669f1947cabb9d70a453482fd06c_JaffaCakes118

Files

401a669f1947cabb9d70a453482fd06c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bb144d2b4ae1a894ff25816b2400376b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
InitializeSListHead
LZCopy
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
Sleep
WaitForMultipleObjects
TryEnterCriticalSection
OpenEventW
ReleaseMutex
OpenMutexW
CreateMutexW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
ExitProcess

user32

PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ