61a8018166c5a2f5e56de681aa8cd709_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61a8018166c5a2f5e56de681aa8cd709_JaffaCakes118
Size

376KB
MD5

61a8018166c5a2f5e56de681aa8cd709
SHA1

6f24952acd3cc72a9135efb4993713ee57a69dd5
SHA256

b926b26db94cfa106c7c75e27b9c07e09c161e09d86969185447da51762aa7e3
SHA512

17038575bc549b891a7eb24261d9dd22dfe54d3b0fa51f56879370089cac7b91ade2f43b24922789a683b15c7d496663c00d030e382ffe31f0175f1a32fd0178
SSDEEP

6144:5wQ1TgJ8bQ52PKip+v1h+0uQRanu1K9Dzv/SNaZSm5N3xSoDQEMbukR/ZpMl/WL:YYSS+7+ZQRauwZvxZbj384ZLwZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61a8018166c5a2f5e56de681aa8cd709_JaffaCakes118

Files

61a8018166c5a2f5e56de681aa8cd709_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4e28e74c63599ba7c9022b39ba0df099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ