33b122ed1c8c13bc7a6fc3dbc0585d2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33b122ed1c8c13bc7a6fc3dbc0585d2e_JaffaCakes118
Size

41KB
MD5

33b122ed1c8c13bc7a6fc3dbc0585d2e
SHA1

8cf82a92c59c2c6d1ebff269151a816d65cd10dc
SHA256

72ce34e0927dadf37ec44cebb0e3be59d6d3a2597584e7ed3d2a1073495c0c52
SHA512

eda0b6349bd6ea8f5a69033e13b421d768a098660caed212db8a9ebb742d886485138dbb4b6722471b47c2ca2aff5a26993572ba79dcbcd2531a48cda563a363
SSDEEP

768:adBvUbs3k9OJAFKeQXlCocKeS0KZaI/QlYaKjBfyD8xmXjfNNnN/mAc:adNCaVfarlYaKjB64xmb3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33b122ed1c8c13bc7a6fc3dbc0585d2e_JaffaCakes118

Files

33b122ed1c8c13bc7a6fc3dbc0585d2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1872d09f33cb96df619fcaea44c37945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.TEXT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RSATA
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ