d400e433a1bb4001f69fe0d556fefffd_JaffaCakes118 | Triage

Sharing

General

Target

d400e433a1bb4001f69fe0d556fefffd_JaffaCakes118
Size

382KB
MD5

d400e433a1bb4001f69fe0d556fefffd
SHA1

aca104d3cbd39e1789cc50f393244a0638f1f77f
SHA256

5b325a29a8a18cd28a81644c4b45a172bcf7dc0f15d9b242b55430724a5ad3c6
SHA512

ab3dcc1d1bc3bea48b9177de45a0cdb1b0b2389eaa0de5cfc145bd763b684cd02dae0159bc6a0920ab823141a856139709fb4f8742b7f14aa7f35249598e14a2
SSDEEP

6144:HdmMXvDE1kyhhedQRG3bMxgPkUp5r10Phru2CM+FsuymJmp4W9GRolwMNucG+:9p7MedJbGPBhOXpJS4VRolHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d400e433a1bb4001f69fe0d556fefffd_JaffaCakes118

Files

d400e433a1bb4001f69fe0d556fefffd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

635ebbdf4441e86c034aa5656d7d6958

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FreeConsole
OutputDebugStringW
GetThreadContext
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegCloseKey
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
UnregisterTraceGuids
TraceEvent

odbc32

SQLFreeEnv

Sections

.text
Size: 270KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ