66c8928c8bebabfa4957b896c3ea6493_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66c8928c8bebabfa4957b896c3ea6493_JaffaCakes118
Size

395KB
MD5

66c8928c8bebabfa4957b896c3ea6493
SHA1

8b13ba46afa3a7123fe74902cfe47a60674059c7
SHA256

464b25b3dd3d526d01a6b45ab255917f84f51dccb7f5de8e7cf4f617e2bec3bb
SHA512

b08f4ef1eebd0ccdb43a1f65b0a7e8e07b1633bcc4c63fd7ba57ed2381a2e264f7bb8b9e590b2858542b16f82da8ad6ae39a840d2b0fd5a0f8d5b5bb431ea642
SSDEEP

6144:pbBmvxGbOnpdRIa4WyA9SNDVZRedLe1COvRJr7YpchkiFkpTX3JcVmalUB7bgTz:pbIQbyv27USN3d1FGpliqpTHJtiz0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66c8928c8bebabfa4957b896c3ea6493_JaffaCakes118

Files

66c8928c8bebabfa4957b896c3ea6493_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e9a3c50dec7ad04acc58afdd4c752832

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetCurrentProcess
GetModuleFileNameA
GetVersionExA
TerminateProcess
TlsGetValue
TlsSetValue
GetLocaleInfoA
GetACP
InterlockedDecrement
GetSystemInfo
SetEndOfFile
LZDone
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
RtlUnwind
ExitProcess

user32

wsprintfA
ReleaseCapture
PostMessageA
GetWindowPlacement
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ