a266618c16c5aaae4ef5ce0b50547da7_JaffaCakes118 | Triage

Sharing

General

Target

a266618c16c5aaae4ef5ce0b50547da7_JaffaCakes118
Size

381KB
MD5

a266618c16c5aaae4ef5ce0b50547da7
SHA1

00cdd423999f0c55396aa62671525754a6335602
SHA256

2e231425dba5878f300dba9f97f67e9062d2718bbb920964a6c350406d9afb52
SHA512

45a980493ac9863febad54eafcc5486e3f390f7ca2d77f2b2cacd0762ad4c2d332496dc1992faeeaae2197a6247b21ae4659f7b5c466e132247448e383082569
SSDEEP

6144:18nXM7GbQIpNK8e+1JBPSp9EgOg1K8/HKFuI9WymRxQiena3bI168wAv5xbGQV:k8a3mcXBKnoyXIgymRWAkPwAxxbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a266618c16c5aaae4ef5ce0b50547da7_JaffaCakes118

Files

a266618c16c5aaae4ef5ce0b50547da7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7b634cbb6a4b8cb324fcdb634dc14b9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

UnregisterClassA
DdeDisconnect

advapi32

RegOpenKeyExA
RegQueryValueExA

odbc32

SQLFreeHandle

Sections

.text
Size: 270KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ