a33d6dfcc9999631f6633c7105cf36e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a33d6dfcc9999631f6633c7105cf36e6_JaffaCakes118
Size

361KB
MD5

a33d6dfcc9999631f6633c7105cf36e6
SHA1

dd81c9aeb4c1e42da8e1a3ce24c34a6ba3137e64
SHA256

cefa8fb599bb5d98452a44941c890c78a05b3592d49368085b56b655b21b5940
SHA512

0a43e1889439b5a8b5c06f588876d329a6ddc8574ba3734cf6cefdd838ee1b54a40a4420409570329981053136d6aadfa342bc971f512cd1c2e629dd9aeedf5a
SSDEEP

3072:utE3SQa1r08+XSa4Mr4SDZSj1PSH864zbfTTu8v8HDQImQxUKjVU6EAmUo0ncCo2:tUlC/m71CyqAou1kFhI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a33d6dfcc9999631f6633c7105cf36e6_JaffaCakes118

Files

a33d6dfcc9999631f6633c7105cf36e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

389954203fa77c58f744496489ce06ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

PDB Paths

2gerGW@4herhw*9283y4huWO.pdb

Imports

user32

GetCursor
DrawFrameControl

msvcrt

malloc

kernel32

GetDateFormatEx
GetModuleHandleW
FindAtomW
GetAtomNameA
IsSystemResumeAutomatic

gdi32

GdiFlush

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT1
Size: 284KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

yP
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ