033768a929f306446e940102d1d8c322_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

033768a929f306446e940102d1d8c322_JaffaCakes118
Size

88KB
MD5

033768a929f306446e940102d1d8c322
SHA1

7744c11156c0de99980536c87c9e230178b730f9
SHA256

da3106840525485163057fd8a9290cc019a8d1b25f99dcd69fa5ef38bae14698
SHA512

5fdcb7f6886eb6be3b052367432607ef7dac6f297819ff7230917a71403d9b7d41ef442a088cc6d07c79373146e2d9f5684ee4485b0d1a382bbe714ce51b0a16
SSDEEP

1536:i9ydeSV24u0SOiP5aquof+FiLaj/mUu/wZfvnf/tafUHYONBVcksb63YMfsXy0zA:i9Mk5aMm7Yb63NfsXy0R9BJzS9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
033768a929f306446e940102d1d8c322_JaffaCakes118

Files

033768a929f306446e940102d1d8c322_JaffaCakes118
.exe windows:5 windows x86 arch:x86

de17a8e2e35d52abdde8ee5eeb81bd71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
fopen
strcmp
fclose
_initterm
__setusermatherr
_except_handler3
fwrite
wcslen
_strnicmp
strrchr
_acmdln
__p__fmode
__set_app_type
exit
_exit
cos
_adjust_fdiv
sprintf
_XcptFilter
__getmainargs
free
memset
malloc
__p__commode

kernel32

GetStartupInfoA
VirtualProtect
GetModuleHandleW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ