33c608c52ec83acbe432452a89d44a80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33c608c52ec83acbe432452a89d44a80_JaffaCakes118
Size

314KB
MD5

33c608c52ec83acbe432452a89d44a80
SHA1

76c2eb109926b69b7064a0ce255462e582cce807
SHA256

47e34e5fcfa3ffe43838a9a01268bc490fb7f94f3e513a46333ad8aa6f7c59e6
SHA512

3b8465e3b354441136344b488efae8315cfe207f411613784131582ed9e064457bc6d996bf86a3ea9f642b418724e3b76e80addf07febe9ec16574ac33dcc351
SSDEEP

6144:xpGuECvlXgOXzl7uJ6HJ3WwYdWpHY1UkWcUInByHm6:3GBklwOJ7Q6p7ciiUb5YBMm6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33c608c52ec83acbe432452a89d44a80_JaffaCakes118

Files

33c608c52ec83acbe432452a89d44a80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03a8717af4afb0642e4b515f6381de77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
LocalSize
GetLastError
Sleep
VirtualAlloc
GetProcAddress
SetEvent
GetModuleHandleA
GetCurrentThreadId

user32

IsZoomed
IsWindowVisible
EnumThreadWindows
GetClientRect

gdi32

PatBlt

ole32

CoInitialize

netapi32

NetDfsManagerInitialize

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 210KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ