a980df6ae296fdda58e2c8567f6d74cf_JaffaCakes118 | Triage

Sharing

General

Target

a980df6ae296fdda58e2c8567f6d74cf_JaffaCakes118
Size

211KB
MD5

a980df6ae296fdda58e2c8567f6d74cf
SHA1

25c1c77c41b65e413bc8c7b32a9d6adcc8bd017b
SHA256

ed9d1af7c5236c2b69c2d999f33c800963a1c2c3d147094e2e5e8b54f27366c9
SHA512

b6debbd433d232582e3a23b4b5668ba484b37232413e0ca6aefbbd011ed51820a7298c1495a68cae2ae5eb36aadb71b07ac2f480d8175cdef815b753a961cade
SSDEEP

3072:uAAWfuKK/9ryOgsuzzSjUZUN/ySmov0SBoccYHzUmXqzcwcXnsd8Q8R25iR:uA9ZuKujUZUN//PAccYJXqowmsd8xR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a980df6ae296fdda58e2c8567f6d74cf_JaffaCakes118

Files

a980df6ae296fdda58e2c8567f6d74cf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

333555ec5680ea8ae2a66792b984a695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
QueryPerformanceFrequency
RaiseException
GetThreadLocale
InterlockedExchange
RegisterWowExec
GetVersionExW
InitializeCriticalSection
CopyFileW
GetLocaleInfoA

user32

TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 639KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ