33330d232dc65de6c888f1dd2197b83c_JaffaCakes118 | Triage

Sharing

General

Target

33330d232dc65de6c888f1dd2197b83c_JaffaCakes118
Size

37KB
MD5

33330d232dc65de6c888f1dd2197b83c
SHA1

69f0c7df68c65d4245620e4e4f63b644981a6966
SHA256

0d26514e4a3dec2b8d692b911f1837d32fd700c9aad23980a8abba6d8b53348d
SHA512

f29fb20b1cd76023b8c0f7a0f9109b2e6992b42c072e26acc96e16edf37c54509b54f5bbe9644f00920f30b1350d46027a13f0374da54c5c91330bada95a09a9
SSDEEP

768:IzCg7g3H4hiPiL1GrDALLlcp/s5w7wtdn5:cCl3HrPihmWLiRsS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33330d232dc65de6c888f1dd2197b83c_JaffaCakes118

Files

33330d232dc65de6c888f1dd2197b83c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c0a09c45526dac6484893b64fcf5ce2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeviceIoControl
CreateFileA
GetStartupInfoA
WriteFile
lstrcatA
GetCurrentDirectoryA
lstrcmpA
ExitProcess
Sleep
FindFirstFileA
GetModuleFileNameA
SetFileAttributesA
DeleteFileA
lstrcpyA
CreateThread

msvcrt

memcpy
memset
strlen
memcmp
malloc
rename
sprintf
_except_handler3
strchr
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ