bad4727ba1bc5a677a2df7f0cf0772e0_JaffaCakes118

General

Target

bad4727ba1bc5a677a2df7f0cf0772e0_JaffaCakes118
Size

246KB
MD5

bad4727ba1bc5a677a2df7f0cf0772e0
SHA1

e6df62d46176a1518b9087ab6299e532d8bfbaa4
SHA256

9292e3c434fc81dfde5a7b05ba13efbbec5a60cf3750be8a0ea5b662dd421b56
SHA512

952e4f4c343e8ef0760ef6f1853663dc8073974f5a1b1dfbaa09a78d677f5cbf314130b61c7040bff0e1c9376e6f135049f8c5a3206aaff145f0de87920549ae
SSDEEP

6144:fB5MhzAKcUvOsoqLXPfA6BlyVdDsNaH9GGME497wFZzkT5:nMzTGso8XP7lyVdDzUGx4xwrzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bad4727ba1bc5a677a2df7f0cf0772e0_JaffaCakes118

Files

bad4727ba1bc5a677a2df7f0cf0772e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd795b3f6437b251f63e2157ecd5071a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strcpy
strlen
strncpy
memmove
memcpy
_CIexp
_CIpow
malloc
free
fseek
ftell
fread
fclose

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
lstrcmpA
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
InitializeCriticalSection
HeapFree
HeapAlloc
ReadFile
WideCharToMultiByte
FreeLibrary
LoadLibraryA
GetProcAddress
HeapReAlloc
CreateFileA

user32

MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
GetForegroundWindow
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos

comctl32

InitCommonControlsEx

ole32

CoInitialize

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLPrepare
SQLBindParameter
SQLExecute
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

winmm

mciSendCommandA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd795b3f6437b251f63e2157ecd5071a

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

comctl32

ole32

odbc32

winmm

Sections

.code Size: 8KB - Virtual size: 7KB

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 11KB

.code
Size: 8KB - Virtual size: 7KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 11KB