a416549a0681ad340cdc302e2a5940fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a416549a0681ad340cdc302e2a5940fe_JaffaCakes118
Size

400KB
MD5

a416549a0681ad340cdc302e2a5940fe
SHA1

3be9a867b90bb8642dfff636646a45ec36a92d6f
SHA256

6b429aa316ca5f5593380bb29d02912e0e5370573b625e15f7af9288693d90b5
SHA512

668bb5b1063c41b3cf83a5789145cadeb6854b7f2f006aa8ae164489d2dd343d117714ca09d990d08cc276aac7d74a3e23bb0486f055e731c82ad18f9353ad7f
SSDEEP

12288:4cmYFatCSTkJcVLYXkfvM8Udc4n+ln2qX:4cUsSgJm2p8F4n+J7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a416549a0681ad340cdc302e2a5940fe_JaffaCakes118

Files

a416549a0681ad340cdc302e2a5940fe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8b62e83cbe6134f51ec2467c4beeab48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
QueryDepthSList
LZCopy
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
Sleep
WaitForMultipleObjects
TryEnterCriticalSection
OpenEventW
ReleaseMutex
OpenMutexW
CreateMutexW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
ExitProcess

user32

PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ