33378e801602d0028781a0a4669d1f77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33378e801602d0028781a0a4669d1f77_JaffaCakes118
Size

4KB
MD5

33378e801602d0028781a0a4669d1f77
SHA1

c6569da962a88c0992da4a403745b25d560ac40c
SHA256

9621ee003bc8354acc6d0e0442d1c05cea09eb2cee153b4e5eedf292ea76d969
SHA512

4c941e2df0aaf963ce38df5c95023dbdec2e4bdf65db9ab2e2b5eeda5cb1e2228da13508cbf70cc1bbf04e66b6a9b46bf276afd4cdfa7182b87a5f1c6f8a6c16
SSDEEP

96:9a/JJqRdbiN52kXX2yYY+2t+YJfsN5AtnoNoyn:kJJ2iNkkXbYWt+YJUatnoNoyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33378e801602d0028781a0a4669d1f77_JaffaCakes118

Files

33378e801602d0028781a0a4669d1f77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c1773f92cafc6bb906d906158c12ddb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetSystemTime
GetSystemTime
Sleep
DeleteFileA
CopyFileA
GetDriveTypeA
SetFileAttributesA
CreateProcessA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey

msvcirt

??1ios@@UAE@XZ
??1ofstream@@UAE@XZ
?endl@@YAAAVostream@@AAV1@@Z
??0ofstream@@QAE@PBDHH@Z
?openprot@filebuf@@2HB
??6ostream@@QAEAAV0@PBD@Z
??_Dofstream@@QAEXXZ

urlmon

URLDownloadToFileA

msvcrt

_access
exit
__CxxFrameHandler
_EH_prolog
memset
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.data
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE