33421e3896caf7336188eeb53a6255fb_JaffaCakes118 | Triage

Sharing

General

Target

33421e3896caf7336188eeb53a6255fb_JaffaCakes118
Size

46KB
MD5

33421e3896caf7336188eeb53a6255fb
SHA1

ce3287892b93a232854bfafa709f02685ce89e53
SHA256

89770377263d861aa33933a304f9d47f7ae3cb3c091718f96c41833bfdad19da
SHA512

c25d56b9aa7704a11f3eeadbf51a945d8b6be3f30adb99d3a3d99867cd28c44ee2b9e48547f8bd7eb33689f292a1cb973f3e77677fc96f9765290e41c77ecbbe
SSDEEP

768:y8emlttVCRY6o6ob1Zlc2pH0AyB9jxuio8E2BcK4j4d7ELlI4DzxuhIO+fqtQ54F:y8JlzVXT9hTc0aFbXcKk4+Cosh2fqtQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33421e3896caf7336188eeb53a6255fb_JaffaCakes118

Files

33421e3896caf7336188eeb53a6255fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66c59c986f62c16905b27298ee89d6d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FindResourceA
lstrlenA
FreeLibrary
LoadResource
WriteFile
GlobalAlloc
SizeofResource
lstrcatA
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
WinExec
CloseHandle
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ