33ea627fc0949b52fb6fd602ed20f540_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33ea627fc0949b52fb6fd602ed20f540_JaffaCakes118
Size

477KB
MD5

33ea627fc0949b52fb6fd602ed20f540
SHA1

5d85ab9c1e9c1548a62db38db29037659899e352
SHA256

edc22950767175de3f3fab1cef83a0063d25c40127e595fec02d5218683a84cc
SHA512

96d23dc740db8e6aa843c498efa5e568b10d04b6083f6e5200254c77dba0ca51ccbf9c0d7070b566a2819c5e090836ac1c8d2004c10143a59895e0a631c90a90
SSDEEP

12288:DfKS/UYqCfYXKSyEl4RfrKEXAfhliWtw3jxoGUBL:LQqTqrtWr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33ea627fc0949b52fb6fd602ed20f540_JaffaCakes118

Files

33ea627fc0949b52fb6fd602ed20f540_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Lulyxyko
Buwycy
Savotedy
BoniCiMa
VafywulituPuVe
Digubucegupa

Sections

CODE
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 209B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ