33c0eadeaac933c18710f8aa00c65d7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33c0eadeaac933c18710f8aa00c65d7e_JaffaCakes118
Size

458KB
MD5

33c0eadeaac933c18710f8aa00c65d7e
SHA1

c48e986adaeb04df1ea29e30c639d1c1bf375bee
SHA256

54fb323f1c85f0a0cbd2b1fa39cb3d4de658d5bd98b48f8829e915e7764b528a
SHA512

eaad2b787420dfb1bf4d4c3deb42ebad71417cd60dd23ad09d0167f6bade8cf6a6bf864d07ac15e7ca69e5413c08529be1ccc12c3c523eddaeedb9f319f87a14
SSDEEP

12288:FC/dRYgHEOL1xOJNCcOV5fSLext+AdmBKUCKlywdo:FCV5EY1xI4JV5fSL8t+VvCKNdo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33c0eadeaac933c18710f8aa00c65d7e_JaffaCakes118

Files

33c0eadeaac933c18710f8aa00c65d7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16bea41432358562edee0caa35159ec3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
LoadLibraryA
GetVersionExA

user32

GetDC
FindWindowA
MessageBoxA
FillRect

gdi32

Rectangle

msvcrt

__setusermatherr
strcmp
free
malloc
_exit
_XcptFilter
_controlfp
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ