286567c9445075a22f6962a1a8f7cec6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

286567c9445075a22f6962a1a8f7cec6_JaffaCakes118
Size

80KB
MD5

286567c9445075a22f6962a1a8f7cec6
SHA1

99ece64ed898701b26d72549ceb38784eb91a4f8
SHA256

b02a9254397ebca45bd10a6ac377acd3abfff190235f1351bb04ae3b999ffdbb
SHA512

1c9fdb59906a07b550b9e0aee4ac744ec2cdfead7d42a1e44d30bae71fe0e23cb980614a6259c93b73b69bf757fb712b41cebb0441524b38e9a566199968e390
SSDEEP

1536:VkVQIKsBU/4E+UubzhjPxMOdswLeIfHJRP+RDIOAlPDJj7Bby:VOwsBOiVqOdLBRWYj7Bm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
286567c9445075a22f6962a1a8f7cec6_JaffaCakes118

Files

286567c9445075a22f6962a1a8f7cec6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8cfc07bd8de108f3bc12879b302d6c86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetTimeFormatW
GetVersionExA
HeapAlloc
HeapCreate
SetLastError
WaitForMultipleObjects

user32

FillRect
GetUpdateRgn
DefDlgProcA

msi

MsiRecordSetStringW
MsiRecordGetInteger
MsiProcessAdvertiseScriptA
MsiCollectUserInfoA
MsiGetProductCodeA

oleacc

GetOleaccVersionInfo
GetRoleTextW

oledlg

OleUICanConvertOrActivateAs
OleUIBusyW
OleUIAddVerbMenuA

odbc32

SQLTablePrivilegesA
SQLProceduresA
SQLNativeSqlA
SQLExtendedFetch

Sections

.text
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ