3d4744adc11002907467a66af6b4c6a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d4744adc11002907467a66af6b4c6a9_JaffaCakes118
Size

80KB
MD5

3d4744adc11002907467a66af6b4c6a9
SHA1

d6672238efd3091928b72072778f8f740ee8fb80
SHA256

02229b84e4de29dd543048a1d3d90c50e825e9de25b04b6509f2b32fb9f477d8
SHA512

f1b542bd6c445adc189254caff65d8dbe9dc368c837eb7f0c37bbf878f89694caaf932aeb3e11d8d92810245bc034e7114f30d89a2a4b3c74a7ad979a2a1177e
SSDEEP

1536:tNNYuADHiU0JIbH1elSnfj0YybsTsBR/BH6PzuE7g+Jr728XPT:9YD10JIpeij9ytrE7gOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d4744adc11002907467a66af6b4c6a9_JaffaCakes118

Files

3d4744adc11002907467a66af6b4c6a9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8cfc07bd8de108f3bc12879b302d6c86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetTimeFormatW
GetVersionExA
HeapAlloc
HeapCreate
SetLastError
WaitForMultipleObjects

user32

FillRect
GetUpdateRgn
DefDlgProcA

msi

MsiRecordSetStringW
MsiRecordGetInteger
MsiProcessAdvertiseScriptA
MsiCollectUserInfoA
MsiGetProductCodeA

oleacc

GetOleaccVersionInfo
GetRoleTextW

oledlg

OleUICanConvertOrActivateAs
OleUIBusyW
OleUIAddVerbMenuA

odbc32

SQLTablePrivilegesA
SQLProceduresA
SQLNativeSqlA
SQLExtendedFetch

Sections

.text
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ