49fab2a6e55c4eb396bb53bb43106053_JaffaCakes118 | Triage

Sharing

General

Target

49fab2a6e55c4eb396bb53bb43106053_JaffaCakes118
Size

398KB
MD5

49fab2a6e55c4eb396bb53bb43106053
SHA1

d1adb60a355daff966dbcba622472c98e03a4eee
SHA256

4f56fded7683dc27f85d258c780a9fe833986519100ee9b4b13bedc13738d8e7
SHA512

b64e366beaff0fab916e9891bde6c5407b983bdbae399f0125d153823a78804f78e04561cefe2f0c45b10ad8cca3c4a7b8980b09f98f63f150278c0a6bde0384
SSDEEP

12288:KnB77DndX0luiksfuqdMFzC6/IFH2i7lsJ:yDnpJiklY0u2GO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49fab2a6e55c4eb396bb53bb43106053_JaffaCakes118

Files

49fab2a6e55c4eb396bb53bb43106053_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d078a979ed2217a39e15dd99d1f00e8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
RtlFillMemory
GlobalFix
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
ExitProcess

user32

PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ