d1e30acbb95b4a1148fb1ea471173186_JaffaCakes118 | Triage

Sharing

General

Target

d1e30acbb95b4a1148fb1ea471173186_JaffaCakes118
Size

216KB
MD5

d1e30acbb95b4a1148fb1ea471173186
SHA1

64be3be9fcc2834b1837981152f0e91f4c533d4a
SHA256

5d0c12fc6c87d9542c97881b873613fcd15aa7343521717d936acee7b5cc3730
SHA512

cd52589f533b71746afe4ebe7e0bafaf929f40d7eb084bab1af561a9489fb54853bda5be01f77aef07e6ffba0c9fcec863aae54c5f8d1c205145eb33fa565880
SSDEEP

3072:JDiaEO67PSB1BlrDAJzZJQzHOBQnTFhZDnRVcXfEtjz5awdR8EoSy:JDM/P2/Qz/YTtRVastjzwwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1e30acbb95b4a1148fb1ea471173186_JaffaCakes118

Files

d1e30acbb95b4a1148fb1ea471173186_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ec87886bec8b8e6127ef8f117768df92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetCurrentProcess
GetModuleFileNameA
GetVersionExA
TerminateProcess
TlsGetValue
TlsSetValue
GetLocaleInfoA
GetACP
InitializeSListHead
GetSystemInfo
SetEndOfFile
LZDone
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
RtlUnwind
ExitProcess

user32

wsprintfA
ReleaseCapture
PostMessageA
GetWindowPlacement
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 638KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ