33a55b90154ae6dce920b2a59012ed84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33a55b90154ae6dce920b2a59012ed84_JaffaCakes118
Size

84KB
MD5

33a55b90154ae6dce920b2a59012ed84
SHA1

84d8091ffd3dfc74f4fe9a841de4e95402351978
SHA256

59e92ba08ef16986f00340ddae2e83da4be93416e601752f6e5110a1b53d2d17
SHA512

db6834df9d7fcd69d1eef52a7ffb3951fcf35f81bd41c158a38004054ea16dc87906cce01f5d499010a532b91d3eac4815936888f16abe3c5257db740e6f0822
SSDEEP

1536:3bcZLybHXTdTszPvnVbi8zCxWLquHg81zO:glM1szPhi8GxWLqu5zO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33a55b90154ae6dce920b2a59012ed84_JaffaCakes118

Files

33a55b90154ae6dce920b2a59012ed84_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0677a316860190dc1a0a5940e2df9d5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
CloseHandle
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ