062e207ab3fa5d6508aaf66903871b22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

062e207ab3fa5d6508aaf66903871b22_JaffaCakes118
Size

66KB
MD5

062e207ab3fa5d6508aaf66903871b22
SHA1

2f5c24f4e7c659ec81cec1dfc0d62f6aa74da4b8
SHA256

a9b53409debea513e0fa5378f898e2f6cabb6ce80c47bad0ceba2194a0a133d8
SHA512

ba669027b3a10a25606b787483c9eb8d2f3848eb682bbb4603998370356d923f3af3a36437e78a1e2def6a7b96648a6b7225f65536237f6a3d787b1e1da6f921
SSDEEP

1536:Jg8Y03LEy/ebp5nXKP0fspNn9bnt3f/QL9Q7ZIN:S8xlAp9f0NVn9f/QxciN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
062e207ab3fa5d6508aaf66903871b22_JaffaCakes118

Files

062e207ab3fa5d6508aaf66903871b22_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3b614c34a505fed3c3749c1dd79dfd39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
VirtualAllocEx
GetProcessPriorityBoost
GetOEMCP
GetCommandLineW
GetStartupInfoA
VirtualAlloc

odbc32

SQLBindParameter
SQLParamData

user32

LoadStringA
LoadBitmapA

glu32

gluSphere

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ