9fd5cec094e4868d28afb7d00bc7e587_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fd5cec094e4868d28afb7d00bc7e587_JaffaCakes118
Size

375KB
MD5

9fd5cec094e4868d28afb7d00bc7e587
SHA1

172f6e93f0e7ac5dabc9cd5a9559ef85ad0c036c
SHA256

996bbe05b4e52a52c216251fc743d8c1945824ed448573ab869e98979d15ac5d
SHA512

58a957bab3f667b0777cd5458732e7ecfb11028684203bcca39211768fea512adf0aaeaae4eac10572cc5dbd417dc6e16bb0a1e8ad5f1807019b213718014cc5
SSDEEP

6144:lCXHDhhrSGMqc7OrTydZDubmMo9g6C65g1sNJRNNN+AHU61Iiom2Wuuwy:2DLZu6vGoSMUK21NvNNN++d1Itduw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fd5cec094e4868d28afb7d00bc7e587_JaffaCakes118

Files

9fd5cec094e4868d28afb7d00bc7e587_JaffaCakes118
.exe windows:5 windows x86 arch:x86

007f7209ce5b21b4494bce189afaa5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ