333fd72350d3f7625790049b3a2fe5e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

333fd72350d3f7625790049b3a2fe5e3_JaffaCakes118
Size

83KB
MD5

333fd72350d3f7625790049b3a2fe5e3
SHA1

98f18929941df9a98a0cde79dfe79fda0b0cf3ea
SHA256

212dbac622f22dac775d1c373fc632a7e09f30bb7fb188cfa32e437bf2ab765d
SHA512

567bba57a50f5a716e7ed471d334e41a67b229890647e3c40689c9fd8572126c8071fc4b364d7e979bfa5f025182b0204d66143c3209c98600042d60a744c410
SSDEEP

1536:Qt32/yHLHnuNS0hHQDeE6fEhGMB+yDfjEErxTWDTMqhGKYIZTET8HWNvRRH:QtIyHznDEYeYhTBtDjBkMqhGKZTb2ZH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
333fd72350d3f7625790049b3a2fe5e3_JaffaCakes118

Files

333fd72350d3f7625790049b3a2fe5e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcd5f0fb9192e2336112c28f1019a5ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryActCtxW
GlobalFix
GetOEMCP
MoveFileA
ReadConsoleInputExW
IsBadCodePtr
GetConsoleTitleW
DosPathToSessionPathA
lstrcpy
OpenFileMappingA
SetComputerNameExW
GetTickCount
DecodeSystemPointer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE