33b5a154c8dbfb0ff4b64675af22c308_JaffaCakes118 | Triage

Sharing

General

Target

33b5a154c8dbfb0ff4b64675af22c308_JaffaCakes118
Size

382KB
MD5

33b5a154c8dbfb0ff4b64675af22c308
SHA1

cedbb38a4c096df22c196c44423860b880411eae
SHA256

90a23f5209ff8df0377f270b3bfca3fd35cf41a458f2e4064eca4147850552a8
SHA512

0d1e3e51c18081b35b2f05c7f508d50079ddca6efc1ecc84727380d558a5e7b32b1fe2dd27cddf771ce2c3d6b0ba23b664c3ad319d7c242030d78a39c083f998
SSDEEP

6144:9x5RMc6y4+AGeJKiIdDjky49jypOAEWZqnKET5EIyLjRKg1gXVJiObl:35RMcpAGliLy8hAEWZ+7TSHRKSgFBl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33b5a154c8dbfb0ff4b64675af22c308_JaffaCakes118

Files

33b5a154c8dbfb0ff4b64675af22c308_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8dd9a8c4963cb8cffb8080e8a65de31f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
CreateMutexW
GetStdHandle
VirtualAllocEx
FreeConsole
LocalFree
ResetEvent
LoadLibraryW
GetCommandLineW
InterlockedExchange
SuspendThread
GetPrivateProfileIntA
CreateEventW
GlobalFree
GetSystemInfo
WriteFile
CloseHandle
LocalSize
lstrlenA
GetEnvironmentVariableA

advapi32

IsTextUnicode
RegCloseKey
RegQueryValueW
RegEnumKeyA
IsValidSecurityDescriptor
RegCreateKeyExW
InitializeSid
CloseEventLog
CreateServiceW
IsValidSid
ClearEventLogW
ControlService
RegDeleteValueA
InitializeSid

dssec

DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ