53bfceb1670c79fc720ed07097b59546_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53bfceb1670c79fc720ed07097b59546_JaffaCakes118
Size

245KB
MD5

53bfceb1670c79fc720ed07097b59546
SHA1

861033275e041b0a924313a52cfd7cfc07d81dd0
SHA256

9bf0b094c4d075952a276e140c957167e7d0ead64c0e9df3f12fc23ac08c7623
SHA512

17e6209cf9bf4024927a27589c7a032051fb80406702f3510101ffda46430acf1aa497abaa8557ecdc0d38c69e66d6ca2aa26f6065c87d50512fa24b19300199
SSDEEP

6144:F1qRXtg9snL2tgeF+tWrZbB70A54nZnjMhHX6sQkuisPvv:/qRMsL25rXR4nZ4dXTNMPvv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53bfceb1670c79fc720ed07097b59546_JaffaCakes118

Files

53bfceb1670c79fc720ed07097b59546_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2c44b6a31ebe9506b1dc60cd7d29f3f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegQueryValueExA

odbc32

SQLFreeHandle

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ