33486eba6dd5d1dad560d833ceaf75aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33486eba6dd5d1dad560d833ceaf75aa_JaffaCakes118
Size

437KB
MD5

33486eba6dd5d1dad560d833ceaf75aa
SHA1

63caddc4313c9e9a2fb2f9f907badfaf08e2a319
SHA256

152f51fefd4ddb515d4afba06c06341619d706e09813816148544d902de70d4a
SHA512

8899f3a49edff96a532c0be1a0838a5229a1b0199c9128f56feccea856d6dcdba18113c4873c216d69baa0fe3ccd99422e50e6299cf14aff8952ea2469c6ea50
SSDEEP

12288:2ziYspLd4FUvqwTsHqqMIP1cS8Hwhm7GfHuJIGwSfTWF:XYYGFbwTgqqM7S8QPHQP3WF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33486eba6dd5d1dad560d833ceaf75aa_JaffaCakes118

Files

33486eba6dd5d1dad560d833ceaf75aa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\bugreport.pdb

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE