aa5b36172ce0a56c1df3b0c2512f482b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa5b36172ce0a56c1df3b0c2512f482b_JaffaCakes118
Size

375KB
MD5

aa5b36172ce0a56c1df3b0c2512f482b
SHA1

408c38a5a9c9d6a7969870f88d4afe4ae0bf6a56
SHA256

97688325d606cf619e46e3dba5adef06e77cfe561066b013f6cd7fe9f7138691
SHA512

97d2afcb935b09386959e0e1ef55d0ce3d05588bda87763152a10e5fb89bc6fb24182ff9a3613159f0360007efeb9d249e65d25d093255c83c17efb1f1b2bc34
SSDEEP

6144:ZXTpuTZEVMZPmx5C1PrmYjko+bzlsfAoHgRBlEKfdctoHFUG5bu341BfBm97Dn:Z1eEVMVrmWX+b4AZBR5nu34j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa5b36172ce0a56c1df3b0c2512f482b_JaffaCakes118

Files

aa5b36172ce0a56c1df3b0c2512f482b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c2032835cf8c513ace81a70c8a98ad62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

UnregisterClassA
DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ