cfcda1004caec2ffe8d8a4ed45b5d63a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfcda1004caec2ffe8d8a4ed45b5d63a_JaffaCakes118
Size

378KB
MD5

cfcda1004caec2ffe8d8a4ed45b5d63a
SHA1

6f3555e7682d29ffba7dfaa5cde9eb2d873ddf70
SHA256

d81c0d9999aa866190c2f97bd7735424398a23940e603b7bda7100e4b91d09da
SHA512

8c3b66383805f796dea6590b8db4903d60e2e6302798bc5f63bb65371b5d2a6b3d13886b1c69a2f95f980d6518c135a05435f567dde9f9f2a95b249ecec6cee4
SSDEEP

6144:i9ywcoGJ7twUTy0QG1oug0c7DKs9rlkOQGK/VooGNdvl3RnHb67DQz0q6T:Kczttwj0Kug0cPKJOxK/GoGPvl3RHOYf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfcda1004caec2ffe8d8a4ed45b5d63a_JaffaCakes118

Files

cfcda1004caec2ffe8d8a4ed45b5d63a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2c44b6a31ebe9506b1dc60cd7d29f3f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegQueryValueExA

odbc32

SQLFreeHandle

Sections

.text
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ