33b453e8e4a8c0a1a738fb55dddec1a8_JaffaCakes118 | Triage

Sharing

General

Target

33b453e8e4a8c0a1a738fb55dddec1a8_JaffaCakes118
Size

88KB
MD5

33b453e8e4a8c0a1a738fb55dddec1a8
SHA1

771ca4619ae87ed37a2976c4e1335f8087f83197
SHA256

a69adc037b0331c57b56255007cdf793041d803d8f2bd5428e20c2bda20af86e
SHA512

31c40711a5c1320cb55eaee5d4027d091cf93d7a54d36818225f594bce5513b3647bc526835c75011b85a98a2b8d4f991bb82ef1dec40d3aa0211bb4d18b73a3
SSDEEP

1536:gqds8iu4S573DPVYc1DGqjMGqRtlPuKmLct3GfEGucVeuDi4LU:g7s4SxDPVYuGvGAtMctGu6e9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33b453e8e4a8c0a1a738fb55dddec1a8_JaffaCakes118

Files

33b453e8e4a8c0a1a738fb55dddec1a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

getBuss
getCuss
getMuss

Sections

.code
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE