4853e4e9e23b084ac2ef07a328ee6cce_JaffaCakes118

General

Target

4853e4e9e23b084ac2ef07a328ee6cce_JaffaCakes118
Size

124KB
MD5

4853e4e9e23b084ac2ef07a328ee6cce
SHA1

596312734e3aff41a2b811a0d3ede82a92701ded
SHA256

b01af8115cdcb01605f6c584d1fb905aed868a226f53230c27cf0a2c3ae24b2d
SHA512

0f92636b42b4ec596b944db73340b159b1eac3d1ed4a70b7fa4d011bc48d324bb62c5e71e11fd2ae8cfd224eae3dc6a2ed0dacf6aa58a21407b582e03eb9bcd8
SSDEEP

3072:LlqKh7tgC4vCBLH/0eETOZ8tHtIurXQ3n2Ti7Haj07slz:RxhWC7Fse+O0iMQX2Tz0Mz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4853e4e9e23b084ac2ef07a328ee6cce_JaffaCakes118

Files

4853e4e9e23b084ac2ef07a328ee6cce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4001bf95446e89b457d00dad1b01a888

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

odbc32

ord4
ord5
ord13
ord16
ord117
ord18
ord78
ord140
ord141
ord48
ord153
ord154
ord165
ord24
ord31
ord132
ord133
ord37
ord138
ord139
ord173
ord74
ord75
ord176
ord30

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetLastError
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
MoveFileExA
GetCurrentProcessId
GetFileTime
GetDiskFreeSpaceA
GetTimeFormatA
GetProfileStringW
lstrlenA
GetWindowsDirectoryA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4001bf95446e89b457d00dad1b01a888

Headers

File Characteristics

Imports

odbc32

kernel32

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 36KB - Virtual size: 668KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 36KB - Virtual size: 668KB

.reloc
Size: 8KB - Virtual size: 4KB