082c75b25fb0ad6843d896e69338c16c_JaffaCakes118 | Triage

Sharing

General

Target

082c75b25fb0ad6843d896e69338c16c_JaffaCakes118
Size

78KB
MD5

082c75b25fb0ad6843d896e69338c16c
SHA1

105cd217082ff76855100cf8cd54232ff448c28b
SHA256

da9925a13c9a928163559334371a0f666f29226cc7d3c913192f00c73e843c62
SHA512

1be893c5e3e0a66d173fa5d3b8b2139b6f4f4a0e1c861d884b862b4deed5552d8c34a328fc5941825c8541bcea20bf14e40d6fc06ace7b43206c57dc536f2670
SSDEEP

1536:eUb+J/lKWz+y5DIsYt2reCnU+FXmzVWvMVL87vgbMkqmXTkBzZP:eU8/lz5DIB2rBU+mQvALYBWkzZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
082c75b25fb0ad6843d896e69338c16c_JaffaCakes118

Files

082c75b25fb0ad6843d896e69338c16c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cfc07bd8de108f3bc12879b302d6c86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetTimeFormatW
GetVersionExA
HeapAlloc
HeapCreate
SetLastError
WaitForMultipleObjects

user32

FillRect
GetUpdateRgn
DefDlgProcA

msi

MsiRecordSetStringW
MsiRecordGetInteger
MsiProcessAdvertiseScriptA
MsiCollectUserInfoA
MsiGetProductCodeA

oleacc

GetOleaccVersionInfo
GetRoleTextW

oledlg

OleUICanConvertOrActivateAs
OleUIBusyW
OleUIAddVerbMenuA

odbc32

SQLTablePrivilegesA
SQLProceduresA
SQLNativeSqlA
SQLExtendedFetch

Sections

.text
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ