772061ba7ce5f4e402fe4561feceeace_JaffaCakes118 | Triage

Sharing

General

Target

772061ba7ce5f4e402fe4561feceeace_JaffaCakes118
Size

382KB
MD5

772061ba7ce5f4e402fe4561feceeace
SHA1

f4acc02cadb5a21c8a52cd3cf56664ff5c47d2ec
SHA256

b5c6a601cc95a0cca71dbb55077e76bc4e1ceda7a1b6334c2093f5e7e4d01894
SHA512

1dae06009dba50ad6fc034f42ef4cbcae5c9ad1680f9b68e8f13a5441b0067dfcd6157827602b207d787b53dc934af2006df1284258c96505cd0d80f8abf7c94
SSDEEP

6144:k7XwjNNtdSXOe53n/9lrkzi5LNRg81v8haNhQSFLLISE01Bh:C4NTcBked8i86hQqISE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772061ba7ce5f4e402fe4561feceeace_JaffaCakes118

Files

772061ba7ce5f4e402fe4561feceeace_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4e28e74c63599ba7c9022b39ba0df099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ