6050078c1cc4d88ca2b3990aa32a84d9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6050078c1cc4d88ca2b3990aa32a84d9_JaffaCakes118
Size

82KB
MD5

6050078c1cc4d88ca2b3990aa32a84d9
SHA1

0271814974e22ae8024129c5e502df494d1dde7c
SHA256

8c7a7cd8ab49f9a1a02f488b7af67d5d1153ae16149dbf421255aa85a1a3858b
SHA512

0ca0a19b1477581c6328221132636ea659aa6adfb84e1b7731ce57f3b0b13058e984a6eab723716f2698d3d6260f66d8c5bcaedab4a7454e7f6ea416766bff5c
SSDEEP

1536:MAAohxh9i2YN8CSs6P4o7eQTZR6ZXWJay7KeC2Hu7srkvR/3M:MOQ2cp6P4NYZRXJayjC2HuEkd3M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6050078c1cc4d88ca2b3990aa32a84d9_JaffaCakes118

Files

6050078c1cc4d88ca2b3990aa32a84d9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8f64996ef4ca6aeeab2e9e9f8e7352b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt20

time
strlen
_heapadd
is_wctype
??0istrstream@@QAE@ABV0@@Z
??_Estrstreambuf@@UAEPAXI@Z
wcscpy
??0ofstream@@QAE@XZ
??_Eofstream@@UAEPAXI@Z
??_8ifstream@@7B@
__p__pwctype
_ismbcl2
_putenv
difftime
fsetpos
asin
??_7iostream@@6B@
??1istrstream@@UAE@XZ

sqlsrv32

SQLExecute
SQLDisconnect
FinishDlgProc
SQLDescribeParam
WizLanguageDlgProc
SQLBulkOperations
SQLSetConnectAttrW
SQLBindCol
BCP_writefmt
SQLCopyDesc
SQLPrepareW
SQLDebug
SQLDriverConnectW
SQLStatisticsW
SQLGetInfoW

kernel32

GetModuleHandleW
EnumResourceLanguagesW
CreateJobSet
Heap32ListNext
VirtualAlloc
TlsAlloc
GetSystemTimeAsFileTime
GetConsoleHardwareState
GetTickCount
GetCurrentProcess
FreeLibrary
GetEnvironmentStrings
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetConsoleAliasesW
LoadLibraryA
GetStartupInfoA
SetFilePointerEx

fmifs

DiskCopy
QuerySupportedMedia
QueryLatestFileSystemVersion
FormatEx2
Chkdsk
Extend
ComputeFmMediaType
QueryFileSystemName
Format
QueryAvailableFileSystemFormat
FormatEx
QueryDeviceInformation
EnableVolumeCompression
QueryDeviceInformationByHandle
ChkdskEx
SetLabel

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f64996ef4ca6aeeab2e9e9f8e7352b7

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt20

sqlsrv32

kernel32

fmifs

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 23KB - Virtual size: 67KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 244B

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 23KB - Virtual size: 67KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 244B