3fcdf978ceb2051cecfa93f37f5f7f53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fcdf978ceb2051cecfa93f37f5f7f53_JaffaCakes118
Size

269KB
MD5

3fcdf978ceb2051cecfa93f37f5f7f53
SHA1

3a1c54261b8ce1fe3998ef6a237fd1ae10c1c7f7
SHA256

d6301a30170415b9661a829c6f9c7b6a2728ef91a4bcac865dbc5a1de6973184
SHA512

ee2e65e8d3b34b8a48e506840476f5608990efd77354d74b5e8bc1f6f524ef419c848b6e85ca77397a53d107b37b3e779955950b5b35218e72d97593e2ff36ba
SSDEEP

6144:DcO+ZkanvhDnRd79NDSNdtykCbXk5h31ZCOJz/x2WpFgpGnJjIY:/+Z1TfJNGdtZkOJT5pF7nJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fcdf978ceb2051cecfa93f37f5f7f53_JaffaCakes118

Files

3fcdf978ceb2051cecfa93f37f5f7f53_JaffaCakes118
.exe windows:5 windows x86 arch:x86

50eeeeddde300914f2e7fa95b9bc05a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
OutputDebugStringW
GetNativeSystemInfo
QueryPerformanceFrequency
DisconnectNamedPipe

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegCloseKey

odbc32

SQLBulkOperations

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ