f663b28b3da41486c50a76c6fd700c2f_JaffaCakes118 | Triage

Sharing

General

Target

f663b28b3da41486c50a76c6fd700c2f_JaffaCakes118
Size

398KB
MD5

f663b28b3da41486c50a76c6fd700c2f
SHA1

3bff8a14737a3aac77a88d699ef2b39c700e7e36
SHA256

0ad0b58e98b357583efbc5518485c3873cdbe084a2e0d518ab663e1cb5415110
SHA512

c6a1e281139c3609e28dd611990214d3a408973989966c337629551fef55608c61612cdc5c93bda01e2c89fc772f7a143112440285c1913ff9b07a211a7e3a81
SSDEEP

12288:rmSTEf/oWifPkmPAWoi7jPI/6mV0ySwGbisTrA0Mro:Go/XkiAWo8jPI/AIiZrA0Go

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f663b28b3da41486c50a76c6fd700c2f_JaffaCakes118

Files

f663b28b3da41486c50a76c6fd700c2f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e311062b6161fffabc318887554d6d1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
LocalAlloc
ExitProcess
QueryPerformanceFrequency
RaiseException
GetTickCount
GetCurrentThreadId
DeleteCriticalSection
GetThreadLocale
InterlockedExchange
RegisterWowExec
GetVersionExW
InitializeCriticalSection
CopyFileW
GetLocaleInfoA

user32

PostMessageW
KillTimer
GetFocus
TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ