33773a0f11e126ee6f0efcb425194436_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33773a0f11e126ee6f0efcb425194436_JaffaCakes118
Size

77KB
MD5

33773a0f11e126ee6f0efcb425194436
SHA1

f7b04f0b66e767a2821689271283d88e55a38081
SHA256

07383d76baf50757c86a7de4b2617d661cfd3bba064cc84d684c1ce4a13a4a26
SHA512

27feb0330a282eea465dfa551f340392d9f42defcf25db67ec139a43fb34a384296e00e320326ad81be2807804aa5b9620ca18c328c644c00147b69fbc01d803
SSDEEP

1536:zScyoFxjw/QAuk9u4XUZWoTxEHESZnK/GLaiX2k:zZK/kVwYWo1cFT2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33773a0f11e126ee6f0efcb425194436_JaffaCakes118

Files

33773a0f11e126ee6f0efcb425194436_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b51904180dbc4099bf824bcb96f9155

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GopherFindFirstFileA
GopherOpenFileW
FtpGetFileW
FreeUrlCacheSpaceA
HttpQueryInfoA

user32

DrawIcon
DestroyCaret
FillRect
GetActiveWindow
GetMonitorInfoW
GetShellWindow

advapi32

ReportEventW
RegFlushKey
DecryptFileW
ReadEventLogW
OpenThreadToken

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE