834fedb56b7ff7889c80f45c586febed_JaffaCakes118 | Triage

Sharing

General

Target

834fedb56b7ff7889c80f45c586febed_JaffaCakes118
Size

216KB
MD5

834fedb56b7ff7889c80f45c586febed
SHA1

90fd7d1ec68b1c7e634bf9e82b66c02a4d45317d
SHA256

715c856ca81e3d1a8519992264d1c01b7083383f161855e2cdf3e693a977d87f
SHA512

47dc9dabb3c0d8c74dd67010ac10286aae78b5a1fe852ea391550af26bb3f437dbf610dd68f380d73325b1fd844f889bc2396bf32da68f634d9ff85df52fb9fa
SSDEEP

6144:NCGxvv19z7W8QhD7Enjiqi8OLglh0AOLnTxZfRPQCU/:NCGxX157ah7QGLglhdKTxZZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
834fedb56b7ff7889c80f45c586febed_JaffaCakes118

Files

834fedb56b7ff7889c80f45c586febed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdb9f6fb872d54400477a7d319a27bb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
RtlMoveMemory
GlobalFix
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
ExitProcess

user32

PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ