d246e417385612b459009279e62627d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d246e417385612b459009279e62627d6_JaffaCakes118
Size

19KB
MD5

d246e417385612b459009279e62627d6
SHA1

8cfe94979839c5f9b079aa4636c3673a3e627754
SHA256

acf0fb07e2ab240a6310ac8e063ff4b8f5c8926a368e0dcdf3325db74b8313b6
SHA512

d154bc8cd3d75df20e4c328c7fb0899c82ca5771553a6f99e21d4029dc937ace4ab4754e4218c83c4441b458dd88b138e50409bf29939f09a9392d9aeee4bfb4
SSDEEP

384:m2ER0H0nxXDx6YL7HBAlsg8hdORT42EIHVh3pIXIl+:m2C0Unxv3HBa42JHVVpIXo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d246e417385612b459009279e62627d6_JaffaCakes118

Files

d246e417385612b459009279e62627d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b10b50bfeed20cc79600bfb06bf6731d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleWindowInfo
CreateDirectoryA
VirtualAlloc
GetConsoleScreenBufferInfo
ScrollConsoleScreenBufferA

odbc32

SQLPrepare
SQLRowCount

tapi32

lineDevSpecificFeature
lineDevSpecific

Exports

Exports

IsTpkuncol
EndNvswpijfrh

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rlwljte
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE