eb052f113e30bfd92b1d5f3dca68d701_JaffaCakes118 | Triage

Sharing

General

Target

eb052f113e30bfd92b1d5f3dca68d701_JaffaCakes118
Size

244KB
MD5

eb052f113e30bfd92b1d5f3dca68d701
SHA1

27c57298be2cc77cf59fd2f1cd9b83974b213b2f
SHA256

42ac38bd94f032b75a89aa1cc1db1fde40e99c9515e38663e28c92605e79e617
SHA512

071de193c1287933d2570fcb6382a0c8b4ea35ec48840edc14c341b24e1eac6c9721356078d662369625a5767d40ba120dc4ca9c99cbdf876a27be182dbc28a2
SSDEEP

3072:xhF4DpEf3GhHQclNN0HJmCcBnwte83eJmYoHyZISNR+lRGgMJtIMB/srmr6ey2qN:x+MWqHqutetjZ5E8gith7r6ey2qauS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb052f113e30bfd92b1d5f3dca68d701_JaffaCakes118

Files

eb052f113e30bfd92b1d5f3dca68d701_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4e28e74c63599ba7c9022b39ba0df099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ