33bf0a8605095bcbf071b7b6c454941f_JaffaCakes118 | Triage

Sharing

General

Target

33bf0a8605095bcbf071b7b6c454941f_JaffaCakes118
Size

46KB
MD5

33bf0a8605095bcbf071b7b6c454941f
SHA1

745d019998d8b03ca0d1c981150c98466bfdb9b3
SHA256

5d8796c5b3c862d3455e1dd495d81f199200100f3eef0d4cfb55c99ccead9790
SHA512

06ebb94f1ae5ebad9d4ea39ad33f86bb9e0badd307cf396decc44dc40ced158fa8945621a3d6e4f3d4b9f721c6a84bdbdea39dce113f1290be67b75b0462b082
SSDEEP

768:40wJNTHE/eAl+HltTOy1ncQBYdYUhB6y7YkTK+AfXS/WTF:4rJHfAl+vTF3cYEek++vOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33bf0a8605095bcbf071b7b6c454941f_JaffaCakes118

Files

33bf0a8605095bcbf071b7b6c454941f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fab4fa100b1abbe96ea32056863a776

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessAffinityMask
QueueUserWorkItem
LoadResource
GetOverlappedResult
SetSystemPowerState
GetCommProperties
lstrcatA
SetHandleInformation
LocalReAlloc
GetProcessHeaps
ReadConsoleInputExA
LoadResource
GetConsoleTitleA
TryEnterCriticalSection
ResetEvent
WriteFileEx
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

icode
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

idata
Size: 38KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ