d26a4d1438da66fb3a0d881dd0328a56_JaffaCakes118

General

Target

d26a4d1438da66fb3a0d881dd0328a56_JaffaCakes118
Size

296KB
MD5

d26a4d1438da66fb3a0d881dd0328a56
SHA1

1bb3e551b3fdc6886ebcf9d82b3bcfbcf86abd71
SHA256

ea051c220f5036ac6b49c9dd721954e601a8cf44350939ae48126bfaaf6ec68c
SHA512

22af0b535e0f01e0602d035ec8e98ac99e1e8d346d8a6772d96042b67359042b8da1f01841720bb3310c6672cf452fd1fe8c24ca67c17fba9a808f8f4ca450bf
SSDEEP

6144:B9c0ddJtan0EnFCunEaS84SZgPXxK9m+T0w8GUcPga+KqmnzoPK:BdI31Ea1ryPxMmI0wpMiUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d26a4d1438da66fb3a0d881dd0328a56_JaffaCakes118

Files

d26a4d1438da66fb3a0d881dd0328a56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ed80eafc784806c2803dbe886351a09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesA
GetEnvironmentStringsA
GetCurrentDirectoryA
_lcreat
GetProcessIoCounters
GetStringTypeExA
GetThreadPriorityBoost
TlsAlloc
FreeEnvironmentStringsA
GlobalUnWire
GetDiskFreeSpaceExA
GetConsoleCursorInfo
ResetEvent
GetDiskFreeSpaceA
SetConsoleInputExeNameA
Sleep
lstrcmpA
GetVersionExA
GlobalFree
WritePrivateProfileSectionA
AddAtomA
Module32First
IsBadReadPtr
GetVersion
Heap32ListNext
GetPrivateProfileStructA
VirtualAlloc
GetConsoleOutputCP
FileTimeToDosDateTime
SetErrorMode
ReadConsoleA
UnlockFileEx
ReadConsoleOutputA
LocalFlags
TlsFree
GetCommModemStatus
VirtualFree
CommConfigDialogA
GetCommandLineA
GetLocalTime
ReadFileScatter
GetThreadTimes
SetComputerNameA
PurgeComm
GetConsoleOutputCP
GetConsoleAliasExesW
PurgeComm
CreateTimerQueue
GetConsoleMode
EnumTimeFormatsA
ReadConsoleOutputA
WaitForSingleObject
GetPriorityClass
GetSystemTimes
LZDone
GetPrivateProfileSectionNamesA
ProcessIdToSessionId
GetProcessPriorityBoost
GetConsoleOutputCP
SetFileShortNameA
GetNumberFormatA
GetTimeFormatA
GetDllDirectoryA

odbc32

SQLAllocHandle

advapi32

LookupPrivilegeValueA
RevertToSelf

Exports

Exports

InitHbysisnnffq
Glhvlvxdo
OpenMmoepjyek

Sections

.itext
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ed80eafc784806c2803dbe886351a09

Headers

File Characteristics

Imports

kernel32

odbc32

advapi32

Exports

Exports

Sections

.itext Size: 4KB - Virtual size: 2KB

.rdata Size: 12KB - Virtual size: 213KB

.data Size: 4KB - Virtual size: 300B

.rsrc Size: 272KB - Virtual size: 271KB

.itext
Size: 4KB - Virtual size: 2KB

.rdata
Size: 12KB - Virtual size: 213KB

.data
Size: 4KB - Virtual size: 300B

.rsrc
Size: 272KB - Virtual size: 271KB