5265a6e46b56c5bee1170ca69ff13a07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5265a6e46b56c5bee1170ca69ff13a07_JaffaCakes118
Size

273KB
MD5

5265a6e46b56c5bee1170ca69ff13a07
SHA1

2b8c0aee98e67b471597673aa8d963d5103d7139
SHA256

9d00535b78079891b8db0fc324de2864813998dffd96724352bbe05df68aab46
SHA512

a5cdb43fb47c97535ec07e88fcdf8ac00fb3aa63cca0bb18884711610da5f1da4555ce34e66b40d058b6cd1e108c52a31c4b40c223930a04446a20c47ea34053
SSDEEP

3072:0/eO0YkZKAuylOedMA23V3WW/axMpRin8wP83SISHv7kegubrBfWeNkFjAgSNls:0/LkZCe6d3VVon8A7VrBfWeNhg9HHA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5265a6e46b56c5bee1170ca69ff13a07_JaffaCakes118

Files

5265a6e46b56c5bee1170ca69ff13a07_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4e28e74c63599ba7c9022b39ba0df099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ