14a21ea2cef5c2b83b0adebde669a0a4_JaffaCakes118 | Triage

Sharing

General

Target

14a21ea2cef5c2b83b0adebde669a0a4_JaffaCakes118
Size

337KB
MD5

14a21ea2cef5c2b83b0adebde669a0a4
SHA1

7835ba2ff77329eba906eae0c10fc83d28b2886c
SHA256

7ff7bc548c41e18802b60024eaae6c7636ad90170d3b77a9000dc1768f7bb5eb
SHA512

be06668eb3b8a1d3eafc75c036d0fb24515afdc0710695ac78cad3a5c9200c7887a6e3627e68c2f100e2dfde8babbc8d1c26796269d7a89b22e5b4cc07a2bbd6
SSDEEP

6144:hj5thsjfnWNJCykvut+YWXs12Q59QD7tI5RiBjjgXwElC/+qyD2:hj7ifnWfCyx8z81RY7t3ANlO+qyD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a21ea2cef5c2b83b0adebde669a0a4_JaffaCakes118

Files

14a21ea2cef5c2b83b0adebde669a0a4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8c7afaae71122819d15f353d25c546c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegQueryValueExA

odbc32

SQLFreeHandle

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ