33ec9d5d5435e97a18ee8c21aa51a575_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33ec9d5d5435e97a18ee8c21aa51a575_JaffaCakes118
Size

42KB
MD5

33ec9d5d5435e97a18ee8c21aa51a575
SHA1

bb6e89c6a95b6f0fd6440e1b3b5b1abcc7af1217
SHA256

99593d5419c66e75e1d854a3bb321113b50e60d2e3a02332b0e80309fc873671
SHA512

520eff9942eb7c48cd2389461e51ebe8423e130ef2666d0886c549a8737888305a19bf06f25c0d200ae864188b5f0a113ff454a7135973caacf0d53767b6803b
SSDEEP

384:pvep01uVItANF6rhz3pxfqgSn5VXsmbv7x0w3swnYY75:ReiMVQ4AdtSn5VXsK7x06sw7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33ec9d5d5435e97a18ee8c21aa51a575_JaffaCakes118

Files

33ec9d5d5435e97a18ee8c21aa51a575_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b2d97fa54f329b44bd731992f7683d84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
UnmapViewOfFile
VirtualAlloc
LoadLibraryA
CreateFileMappingA
GetCommandLineA
GetModuleHandleA
MapViewOfFileEx
CreateFileA

user32

DialogBoxParamA
LoadIconA
LoadCursorA

advapi32

RegOpenKeyA

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ