af0fb52a546780075b30e6f6e86aab0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af0fb52a546780075b30e6f6e86aab0a_JaffaCakes118
Size

121KB
MD5

af0fb52a546780075b30e6f6e86aab0a
SHA1

af0be238ea94616478babd1a9703499a2c3f79e5
SHA256

23a5d868e62cb25a1d7065143bed5da48195726bd3519197da739417e4ea143e
SHA512

44ff9f9ec78611f0611750a0317527235a011bd2adefa2b86695d4e9b832e7e51c36bda08983877236d287d6d81b2911a2227d313169fbb3f296ba9015d914d3
SSDEEP

3072:+XPVEyUKI2agCg+NdGauOAR//lmfxH2/1MlBer1G1A:+dheguPhAR/qxH2ClcG1A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SQLIHelperV.2.7.exe

Files

af0fb52a546780075b30e6f6e86aab0a_JaffaCakes118
.rar
First Real Site About Security - k0d.cc.URL
SQLIHelperV.2.7.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\Visual Studio 2008\Projects\SQLCancer\SQLCancer\obj\Release\SQLIHelperV.2.7.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 822KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
brute/adminpage.txt
brute/brute.rar
.rar
column_names.txt
table_names.txt
brute/column_names.txt
brute/table_names.txt
www.kompaspc.ru-structure.txt