8c2fae063feb62c42cf8cc12abc1a73a_JaffaCakes118 | Triage

Sharing

General

Target

8c2fae063feb62c42cf8cc12abc1a73a_JaffaCakes118
Size

208KB
MD5

8c2fae063feb62c42cf8cc12abc1a73a
SHA1

cd54b363d820615d7a4e2f5255f59fdc9b88ee68
SHA256

61b304ecefd07fd073230a833e76a805c42fcc81a39e1d0a40aff21cdd1e07f4
SHA512

049c8b8967477fb4af485872f83807c5cdfe573add0392fe181a1aa9f7e7e84ba47b55ea78cf069424b0d09bc0b17e6d99e0999ddfb2b1a5d5c25a7488770b70
SSDEEP

3072:KCBPqyvWH1RQyDp6GKpBiq2e4rkbDuWwff3wiYT7TrL2HqnTk8Fra:KmeH1R/sqqvR/9ef3bYfvln48Fr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c2fae063feb62c42cf8cc12abc1a73a_JaffaCakes118

Files

8c2fae063feb62c42cf8cc12abc1a73a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdb9f6fb872d54400477a7d319a27bb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
RtlMoveMemory
GlobalFix
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
ExitProcess

user32

PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ