603c41115dfcac696313c41c7febf162_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

603c41115dfcac696313c41c7febf162_JaffaCakes118
Size

400KB
MD5

603c41115dfcac696313c41c7febf162
SHA1

dadfd9a50ca6db60ab082924e907356f10d94b0e
SHA256

385f52d5c03bdc9c3cddd640887a7ed8222b072d94af0e780a36ac385df53d12
SHA512

be371c7f4abc3651fdfaf4f2c106a5d731a100d9e9f133380067b8705bfa783fb4f3faa884af5287857bbf077385fa00f27df004ac966b0a7f865feaf59a6bfc
SSDEEP

6144:/uAjZz1hkPYlMfQnCrToJtPTj1018y0zAaJDZchGtstw5HBnljPdjiPEnFKPV4:/uAj7hkPyMmCX6sAcktst+biPEF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
603c41115dfcac696313c41c7febf162_JaffaCakes118

Files

603c41115dfcac696313c41c7febf162_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8b62e83cbe6134f51ec2467c4beeab48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
QueryDepthSList
LZCopy
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
Sleep
WaitForMultipleObjects
TryEnterCriticalSection
OpenEventW
ReleaseMutex
OpenMutexW
CreateMutexW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
ExitProcess

user32

PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ